mini-httpd (1.30-12) unstable; urgency=medium

  * Declare compliance with Standards-Version 4.7.2. (no changes required).
  * Document new systemd service and corresponding init.d
    script in the manpage.

 -- Alexandru Mihail <alexandru.mihail2897@gmail.com>  Sun, 09 Mar 2025 13:51:39 +0200

mini-httpd (1.30-11) unstable; urgency=medium

  * Added patch redirecting CGI script stderr output to /dev/null.
    This fixes CGI stderr output being sent to the client, which is not
    compliant with CGI RFC and breaks some sites.
    (Closes: #437932)
  * Added patch which starts logging CGI script invocations.
    This enables referrer analysis.
    (Closes: #516307)
  * Added a basic upstream/metadata tracking acme.com.

 -- Alexandru Mihail <alexandru.mihail2897@gmail.com>  Wed, 19 Jun 2024 23:02:24 +0300

mini-httpd (1.30-10) unstable; urgency=medium

  * Added patch improving handling of "charset=%s" in error pages
    and directory listing. Before, a literal "%s" was output as opposed to
    the actual charset. Now, the correct charset (UTF-8 for dirs and
    ISO-8859-1 for err) is output. Thanks again, Alexander Foken !
    (Closes: #714549)
  * Added a Systemd DocumentationKey entry fixing lintian warning. This
    points to the manpage for now.
  * Added SystemD hardening features to service. The directives
    I have provided should have no impact. I've confirmed no impact to
    basic functionality, vhosting, error pages and CGI. I managed to
    get the service to a "4.7 - OK" rating by using
    systemd-analyze security mini-httpd (all the way from 9.6).
    I have NOT enabled hardening features which have a high change of
    impacting functionality such as removing CAP_CHROOT which would
    mean mini_httpd's chroot mode of operation is forbidden.
    Help is welcome in improving these options (maybe someone with a
    security background could chip in).
  * Added a NEWS entry informing users of potential breakage due to
    new systemd hardening features.

 -- Alexandru Mihail <alexandru.mihail2897@gmail.com>  Tue, 16 Apr 2024 00:11:43 +0300

mini-httpd (1.30-9) unstable; urgency=medium

  * Added patch fixing NPH scripts (SSL) getting an additional
    HTTP/1.0 200 OK header before the actual expected one. This
    violates the CGI RFC (RFC-3875).
    (Closes: #1064656)
  * Merged branch fixing mini-httpd starting too early after reboot.
    This only happened using the old init.d script. The systemd service
    is not affected. Thanks, Jean !

 -- Alexandru Mihail <alexandru.mihail2897@gmail.com>  Fri, 08 Mar 2024 18:44:18 +0200

mini-httpd (1.30-8) unstable; urgency=medium

  * Modified mini-httpd.postinst to check if we're doing a
    fresh install or upgrading. Secondly, if we're fresh installing,
    the default index.html file is copied into /var/www/html only if
    no other index files are present (ex: index.cgi). This prevents
    the shipped index.html overwriting existing index.ext files.
    If we are upgrading, no files will be touched.
    (Closes: #1061792)
  * Removed erroneous duplicate "-C /etc/mini-httpd.conf" in
    systemd ExecStart. The "-C" call was already present in
    the EnvironmentFile (/etc/default/mini-httpd) read and
    used by the service. This resulted in mini-httpd's
    commandline containing the "-C" call twice.
    Thanks, Alexander Foken.

 -- Alexandru Mihail <alexandru.mihail2897@gmail.com>  Fri, 02 Feb 2024 19:42:56 +0200

mini-httpd (1.30-7) unstable; urgency=medium

  * Modified mini-httpd.postinst to not copy
    /usr/share/doc/mini-httpd/examples/index.html into
    /var/www/html/index.html if it's not readable,
    fixing weird edge cases where docker's dpkg
    cleans up /usr/share/*/examples beforehand,
    (Closes: #1061070)
  * Created 0011-fix-typo-in-documentation-maxage
    which clears confusion regarding the maxage
    config & cli option, the actual name for the
    variable being max_age in mini_httpd.c.
    The patch modifies documentation and
    help output to reflect this reality.
    (Closes: #1018900)

 -- Alexandru Mihail <alexandru.mihail2897@gmail.com>  Fri, 19 Jan 2024 21:09:00 +0200

mini-httpd (1.30-6) unstable; urgency=medium

  * Modified 0003-fix-change-index-document-root and
    0005-cgi-php to push index.mini-httpd.html to the end of known
    index.* array, modified install script to copy the provided
    index.html into /var/www/html/index.html,
    if not present (Closes: #1057842)
  * Moved package provided index.html file to
    /usr/share/doc/mini-httpd/examples, to avoid lintian warning regarding doc
    location

 -- Alexandru Mihail <alexandru.mihail2897@gmail.com>  Tue, 12 Dec 2023 00:00:53 +0200

mini-httpd (1.30-5) unstable; urgency=medium

  * Added patch stripping port numbers in vhost setup. (Closes: #491078).
  * Corrected systemd service not consuming /etc/default/mini-httpd
    configurations.
    Thanks a lot, Johannes Schauer Marin Rodrigues (Closes: #1051374).

 -- Alexandru Mihail <alexandru.mihail2897@gmail.com>  Thu, 21 Sep 2023 01:39:39 +0300

mini-httpd (1.30-4) unstable; urgency=medium

  * New maintainer. (Closes: #927950).
  * Declare compliance with Standards-Version 4.6.2. (no changes required).
  * Added systemd service (fixes lintian W:
    missing-systemd-service-for-init.d-script).
  * Changed rules to accommodate the included systemd service.
  * Removed dependency to empty obsolete package: lsb-base (Safe as we were
    only depending on LSB init scripts, superseded by the added systemd
    service and sysv-rc already depending on lsb-base in existing releases for
    non systemd systems).
  * Added missing Upstream-Contact and updated Copyright to reflect new
    Upstream contact email and added new mainainer copyright notice.
  * Clarified NCSA origins of mini-httpd htpasswd* by adding a corresponding
    copyright entry with proper attribution.

 -- Alexandru Mihail <alexandru.mihail2897@gmail.com>  Tue, 05 Sep 2023 01:29:43 +0300

mini-httpd (1.30-3) unstable; urgency=medium

  * QA upload.
  * Drop d/mini-httpd.manpages, installed with upstream Makefile.
    Closes: #1013614
  * d/rules:
    - Change target from 'override' to 'execute_after'.
    - Install upstream changelog under dh_installchangelogs target.
  * d/control:
    - Bump debhelper to 13.
    - Add space after comma in long description.
    - Document Rules-Requires-Root.
    - Update Standards-Version to 4.6.1
  * d/watch: Bump to version 4.
  * d/copyright: Change to secure URI.
  * d/upstream.changelog: Include missing release information, and remove
    end-of-line whitespace.
  * Change init system to not start on install, ref. lintian tag
    [init.d-script-should-always-start-service]. Default settings remains
    identical.

 -- Håvard F. Aasen <havard.f.aasen@pfft.no>  Wed, 20 Jul 2022 23:46:44 +0200

mini-httpd (1.30-2) unstable; urgency=medium

  * QA upload.
  * Upload to unstable.
  * [9a071ed3] Bump standards version to 4.4.0.
  * [8c12d482] Round-trip patches with gbp-pq.
  * [e89bd419] Do not strip binary during link phase.
  * [3637ba33] Add missing versioned dependency on init-system-helpers.
  * [d8a4302c] Bump debhelper compat to 12.

 -- Dmitry Bogatov <KAction@debian.org>  Fri, 12 Jul 2019 01:47:16 +0000

mini-httpd (1.30-1) experimental; urgency=medium

  * QA upload
  * Trim trailing whitespace.
  * Use secure URI in Homepage field.
  * Use secure copyright file specification URI.
  * Bump debhelper from old 9 to 10.
  * Use secure URI in debian/watch.
  * Remove patches missing from debian/patches/series.
  * Set QA Group as maintainer (orphan bug #927950).
  * Fix typo in "fix-makefile" patch.
  * Include CPPFLAGS into CFLAGS in debian/rules to accommodate
    upstream Makefile, that does not respect CPPFLAGS.
  * Bump standards version to 4.3.0

 -- Dmitry Bogatov <KAction@debian.org>  Sat, 11 May 2019 17:57:35 +0000

mini-httpd (1.30-0.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix null pointer dereference (Closes: #916190)
    + Thanks: Salva Peiró <speirofr@gmail.com>
  * Fix typo in path to pidfile in `mini_httpd.conf' (Closes: #893996)

 -- Dmitry Bogatov <KAction@debian.org>  Wed, 12 Dec 2018 05:19:14 +0000

mini-httpd (1.30-0.1) unstable; urgency=medium

  * Non-maintainer upload.
  * New upstream release (Closes: #913095)
  * Fix init.d script (Closes: #902816)
  * Add Vcs-* fields into `debian/control'.

 -- Dmitry Bogatov <KAction@debian.org>  Thu, 15 Nov 2018 16:20:33 +0000

mini-httpd (1.23-1.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Bring back lost HTTPS support (Closes: #818474).

 -- Sebastian Andrzej Siewior <sebastian@breakpoint.cc>  Thu, 16 Feb 2017 23:14:13 +0100

mini-httpd (1.23-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Add patch to fix FTBFS in kfreebsd-amd64.  Closes: #825713

 -- Mattia Rizzolo <mattia@debian.org>  Fri, 17 Jun 2016 10:06:51 +0000

mini-httpd (1.23-1) unstable; urgency=medium

  * New upstream release
  * d/control:
     - Bump Standard-Version to 3.9.7.
  * d/upstream.changelog:
     - Update changes.
  * d/patches:
     - Remove patch fix-add_to_response-buffer-overflow fixed for upstream.
     - Fix support FreeBSD
       thanks Steven Chamberlain <steven@pyro.eu.org> (Closes: #815339)
     - Add patch fix-autobuilders for a problem with package on 64-bit
       thanks Steve Langasek <steve.langasek@ubuntu.com> (Closes: #819125)
  * d/rules:
     - Add hardening
     - Don`t install htpasswd (LP: #943088)

 -- Jose dos Santos Junior <j.s.junior@live.com>  Fri, 01 Apr 2016 17:32:30 -0300

mini-httpd (1.21-1) unstable; urgency=medium

  * New upstream release.
  * New maintainer. (Closes: #780194)
  * Fix CVE-2015-1548
      - Patch fix-add_to_response-buffer-overflow. (Closes: #778925)
  * d/control:
      - Bump Standard-Version to 3.9.6.
      - Bump debhelper to 9.
      - Remove deprecated dpatch.
      - Upgrade packaging format "3.0 (quilt)". (Closes: #664363)
      - Remove article in description synopsis.
      - Add ${misc:Depends}.
  * d/copyright
      - Update to DEP5 format.
      - Formatting copyright.
  * d/rules:
      - Upgrade to dh sequencer.
      - Added upstream changelog extracted from mini-httpd website.
  * d/mini-httpd.init.d:
      - Fix restart error. (Closes: #510905, #755892)
  * d/patches:
      - Fix and add SCRIPT_FILENAME in patch 03-cgi-php. (Closes: #569599)
      - Ensure hardening is enabled for mini_httpd.c.
      - Don't install htpasswd.1.
      - Add index.mini-httpd.html to the list of index names.
  * d/mini-httpd.init.d
      - Source /lib/lsb/init-functions.
      - Add "status" command.
  * d/mini-httpd.postinst
      - Copy index.mini-httpd.html. (Closes: #730373)
      - Use "set -e" and don't install htpasswd. (Closes: #520941)

 -- Jose dos Santos Junior <j.s.junior@live.com>  Thu, 03 Sep 2015 14:59:53 -0300

mini-httpd (1.19-9.3) unstable; urgency=low

  * Non-maintainer upload.
  * Do not install htpasswd, recommend apache2-utils instead.
    (Closes: #674515).
  * Add missing dependencies on $remote_fs to fix a lintian error.

 -- Bernd Zeimetz <bzed@debian.org>  Sat, 16 Jun 2012 01:31:28 +0200

mini-httpd (1.19-9.2) unstable; urgency=medium

  [Jari Aalto]
  * Non-maintainer upload.
  * debian/patches
    - (number 10): New patch to fix htpasswd.c:52: error:
      conflicting types for 'getline'. . Thanks to Ruben Molina
      <rmolina@udea.edu.co>. (FTBFS RC Bug serious; Closes: #552844)

 -- Jari Aalto <jari.aalto@cante.net>  Thu, 07 Jan 2010 11:13:26 +0200

mini-httpd (1.19-9.1) unstable; urgency=low

  * Non-maintainer upload.
  * Fix bashism (Closes: #525366)
  * Fix lintian-detected hyphen-used-as-minus-sign errors.
  * Add watch file.

 -- Raphael Geissert <geissert@debian.org>  Sun, 05 Jul 2009 19:38:05 -0500

mini-httpd (1.19-9) unstable; urgency=low

  * Added kFreeBSD portin patch (Closes: #498368)
    - Thanks to Petr Salinger
  * Enabled CGI by default (Closes: #500708)
  * Fixed init.d script (Closes: #500708, #491083)
  * data_dir will be created if necessary (Closes: #494437)
  * Added example index.html
  * changed default data_dir to /usr/share/mini-httpd/html
  * Fixed typo in 03-cgi-php.dpatch
  * Updated Standards-Version to 3.8.0

 -- Marvin Stark <marv@der-marv.de>  Thu, 15 Jan 2009 15:28:53 +0100

mini-httpd (1.19-8) unstable; urgency=low

  * /etc/mini-httpd.conf:
    - Changed data_dir to /var/www (Closes: #473140)
  * debian/control:
    - Removed Homepage from long description
    - Added Homepage field

 -- Marvin Stark <marv@der-marv.de>  Fri, 28 Mar 2008 19:13:33 +0000

mini-httpd (1.19-7) unstable; urgency=low

  * Patched PHP CGI errors (Closes: #462930)
    Thanks to Thorsten Schmale
  * Changed Standards-Version to 3.7.3
  * Fixed init.d script

 -- Marvin Stark <marv@der-marv.de>  Tue, 05 Feb 2008 08:56:53 +0000

mini-httpd (1.19-6) unstable; urgency=low

  * Changed start behavior in default file (Closes: #454230)
    1 = start; 0 = stop

 -- Marvin Stark <marv@der-marv.de>  Tue, 04 Dec 2007 21:52:32 +0000

mini-httpd (1.19-5) unstable; urgency=low

  * Removed stripping flag from Makefile (Closes: #437570)

 -- Marvin Stark <marv@der-marv.de>  Wed, 15 Aug 2007 13:11:22 +0000

mini-httpd (1.19-4) unstable; urgency=low

  * Removed Daniel from uploaders as wished by him.
  * Fixed init script (Closes: #407775).
    Thanks to Andreas Metzler.

 -- Marvin Stark <marv@der-marv.de>  Sun, 21 Jan 2007 11:52:01 +0000

mini-httpd (1.19-3) unstable; urgency=low

  * Pidfile will be removed, if mini-http gets removed or stopped (Closes: #387941).
  * Changed start behavior of mini-httpd.

 -- Marvin Stark <marv@der-marv.de>  Wed, 25 Oct 2006 21:47:43 +0200

mini-httpd (1.19-2) unstable; urgency=low

  * Resolved conflicts with apache2-utils (Closes: #385268).
  * Added LSB initscript header.
  * Renamed mini_httpd.conf to mini-httpd.conf
  * Renamed mini_httpd.default to mini-httpd.default
  * Renamed mini_httpd.init.d to mini-httpd.init.d

 -- Marvin Stark <marv@der-marv.de>  Wed, 13 Sep 2006 18:11:12 +0200

mini-httpd (1.19-1) unstable; urgency=low

  * Initial release (Closes: #376599, #308660).

 -- Marvin Stark <marv@der-marv.de>  Mon,  3 Jul 2006 20:12:42 +0200
