libapache2-mod-nss (1.0.14-1build1) zesty; urgency=medium

  * No-change rebuild against libnspr4

 -- Andy Whitcroft <apw@ubuntu.com>  Fri, 24 Feb 2017 11:12:56 +0000

libapache2-mod-nss (1.0.14-1) unstable; urgency=medium

  * New upstream release.
    - CVE-2016-3099
  * mod_nss-gencert.patch: Updated.
  * control: Bump policy to 3.9.8, no changes.
  * control: Use https vcs urls, and cgit.

 -- Timo Aaltonen <tjaalton@debian.org>  Mon, 19 Sep 2016 17:12:44 +0300

libapache2-mod-nss (1.0.12-2) unstable; urgency=medium

  * mod_nss-gencert.patch: Modify to fix comparing the number of
    arguments. (Closes: #803443)
  * postinst: Remove /0 on upgrade if it exists.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 09 Dec 2015 12:32:40 +0200

libapache2-mod-nss (1.0.12-1) unstable; urgency=medium

  * New upstream release.
  * mod_nss-gencert.patch: Refreshed.
  * control: Update my email.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 22 Oct 2015 09:46:42 +0300

libapache2-mod-nss (1.0.11-1) unstable; urgency=medium

  * New upstream release.
  * mod_nss-gencert.patch: Refreshed.
  * control: Bump policy to 3.9.6, no changes.

 -- Timo Aaltonen <tjaalton@debian.org>  Sun, 16 Aug 2015 01:45:09 +0300

libapache2-mod-nss (1.0.10-3) unstable; urgency=medium

  * postrm: Clean up the right files. (Closes: #770536)
  * README.Debian: Removed, it was obsolete and contained misinformation.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 12 Mar 2015 15:25:13 +0200

libapache2-mod-nss (1.0.10-2) unstable; urgency=medium

  * rules: Don't enable the module by default.

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 28 Oct 2014 15:11:45 +0200

libapache2-mod-nss (1.0.10-1) unstable; urgency=medium

  * mod_nss-conf.patch: Fix IfModule header so it'll actually load when
    the module is enabled.
  * gencert: Revert back to default legacy db's.
  * Update project homepage and watch file to match.

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 21 Oct 2014 18:52:59 +0300

libapache2-mod-nss (1.0.9-1) unstable; urgency=medium

  * New upstream release
    - removed a bunch of patches merged upstream
    - updated the remaining patches
  * mod_nss-conf.patch: Updated paths, use /etc/apache2/nssdb.
  * dirs: Create /etc/apache2/nssdb instead.
  * control: Use canonical vcs urls.
  * compat, control: Bump dh to 9.
  * debian/nss.conf: Removed, use the patched upstream conf instead.
  * control, rules: Use dh and dh-autoreconf.
  * install, links: Install nss_pcache in /usr/lib/libapache2-mod-nss, add
    a convenience symlink to /usr/sbin.
  * rules: Added a gentarball target.
  * gencert: Create sqlite-based db's.
  * rules: Disable tests, too many fedoraisms.
  * manpages: Install manpages for nss_pcache and gencert.
  * rules: Add a symlink to libnssckbi.so to the nssdb.
  * postinst, postrm: Create the nssdb on postinst, clear on postrm.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 10 Oct 2014 00:20:21 +0300

libapache2-mod-nss (1.0.8-4) unstable; urgency=medium

  * mod_nss-clientauth.patch:
    - Fix CVE-2011-4973: FakeBasicAuth authentication bypass.
      (Closes: #729626)
  * mod_nss-nssverifyclient.patch:
    - Fix CVE-2013-4566: incorrect handling of NSSVerifyClient in
      directory context. (Closes: #731627)
  * control: Bump policy to 3.9.5, no changes.

 -- Timo Aaltonen <tjaalton@ubuntu.com>  Mon, 03 Feb 2014 11:23:58 +0200

libapache2-mod-nss (1.0.8-3) unstable; urgency=low

  * watch: Add a comment about the upstream git tree.
  * mod_nss-overlapping_memcpy.patch: Patch from Fedora to use memmove
    instead of memcpy. (LP: #1093974)
  * mod_nss-httpd24.patch: Port to Apache 2.4. (Closes: #707064)
  * control, rules, libapache2-mod-nss.apache2: Port to apache2-dev.
  * control: Bump policy to 3.9.4, no changes.

 -- Timo Aaltonen <tjaalton@ubuntu.com>  Tue, 09 Jul 2013 16:25:25 +0300

libapache2-mod-nss (1.0.8-2) unstable; urgency=low

  * Add patches from Fedora:
    - mod_nss-conf.patch:
      Change some default config values (modified for Debian)
    - mod_nss-gencert.patch:
      Don't create a default password.
    - mod_nss-negotiate.patch:
      Add configuration options for new NSS negotiation API.
    - mod_nss-reverseproxy.patch:
      Use remote hostname set by mod_proxy to compare to CN in peer cert.
    - mod_nss-pcachesignal.patch:
      Ignore SIGHUP in nss_pcache.
    - mod_nss-wouldblock.patch:
      Fix an NSPR layer bug.
    - mod_nss-reseterror.patch:
      Reset NSPR error before calling PR_Read().
    - mod_nss-lockpcache.patch:
      Lock around the pipe to nss_pcache for retrieving the token PIN.
  * Add flex to build-depends (FTBFS).
  * control: Add a VCS header to point to the git repository.
  * copyright: Use DEP5 format.
  * control: Bump standards version to 3.9.3, no changes.
  * watch: Fix the url.

 -- Timo Aaltonen <tjaalton@ubuntu.com>  Thu, 28 Jun 2012 11:11:06 +0300

libapache2-mod-nss (1.0.8-1) unstable; urgency=low

  * New upstream
  * Patch for softokn3 is not needed anymore
  * Add doc/mod_nss.html
  * Enable Elliptic Curve Cryptography
  * Fix build
  * Add ${misc:Depends}
  * Spelling fixes
  * Bumped policy to 3.8.3
  * Switch to dpkg-source 3.0 (quilt) format
  * Bumped policy to 3.8.4
  * Removed README.source
  * Added pkg-config, libtool & automake to B-D
  * Changed my email address
  * Fix compilation issues (QUILT_STAMPFN)

 -- Michele Baldessari <michele@acksyn.org>  Sun, 17 Oct 2010 14:12:42 +0200

libapache2-mod-nss (1.0.7-1) unstable; urgency=low

  * Initial release (Closes: #659092)
  * Added patch from RH 444348

 -- Michele Baldessari <michele@pupazzo.org>  Mon, 12 May 2008 22:05:09 +0200
