* fix directory creation of /var/log/radicale;
closes: bug#827858,
thanks to Jon Kristensen, Sunil Mohan Adapa and Tim Schumacher
* fix auto-resolve dependency on python3
* fix use package section net (not web)
* fix update patch 2001 to use /etc/radicale/logging,
and adjust that to log to file (not console);
closes: #931201, thanks to Sunil Mohan Adapa
* update DEP-3 header for patch 2001
* Update NEWS entry about reviving Radical 1.x data.
Thanks to Timo Jyrinki.
* Declare compliance with Debian Policy 4.4.0.
* Really fix directory creation and access rights of /var/lib/radicale.
Closes: Bug#919339. Thanks to Slavko.
* Update watch file:
+ Rewrite usage comment.
+ Simplify regular expressions.
* Fix suggest uwsgi-plugin-python3,
and adapt long description and README.Debian.
Thanks to A. F. Cano.
* Fix typos DOMAIN → _DOMAIN in example vhost snippet.
Thanks to A. F. Cano.
* Fix have uwsgi snippet create collections subdir below /var/lib
(not bogusly below /var/log).
Closes: Bug#919339.
* Add NEWS entry about incompatible changes to storage format.
Closes: Bug#916921. Thanks to Bernard Massot.
* Improve uwsgi snippet:
+ Fix commented out setting for running https standalone
(was missing http module).
+ Add commented out setting for KSM memory tuning.
Document usage in README.Debian.
+ Fix create /var/log/radicale/collections
(not only /var/log/radicale) if missing.
Closes: Bug#919339. Thanks to James Valleroy.
* Declare compliance with Debian Policy 4.3.0.
* Update copyright info: Extend coverage of packaging.
[ Ondřej Nový ]
* Remove debian/pycompat, it's not used by any modern Python helper.
[ Jonas Smedegaard ]
* Use authentication scheme "remote_user" by default.
Install and enable tightened rights file.
Include upstream rights file as example file.
* Include Apache and uWSGI config snippets, and example vhost snippet.
Have radicale suggest apache2 uwsgi libapache2-mod-proxy-uwsgi.
* Extend comment in config file on enabling git tracking
to add a .gitignore file.
[ upstream ]
* New release 2.1.11:
+ Fix moving items between collections.
[ Jonas Smedegaard ]
* Add bug-closures to previous changelog section.
* Add TODO item.
* Simplify rules: Stop resolve (build-)dependencies in rules file.
* Stop build-depend on dh-buildinfo.
* Mark build-dependencies unneeded when tests are skipped.
* Wrap and sort control file, and debhelper install hints.
* Update watch file: Fix typo in usage comment.
* Update and unfuzz patch 2003.
* Update copyright info:
+ Extend coverage of packaging.
+ Use https protocol for primary source URL.
* Use https protocol for homepage URL.
[ upstream ]
* New release 2.1.9:
+ Specify versions for dependencies.
+ Move WSGI initialization into module.
+ Check if REPORT method is actually supported.
+ Include rights file in source distribution.
+ Specify md5 and bcrypt as extras.
+ Improve logging messages.
+ Windows: Fix crash when item path is a directory.
* New release 2.1.10:
+ Update required versions for dependencies.
+ Get RADICALE_CONFIG from WSGI environ.
+ Improve HTTP status codes.
+ Fix race condition in storage lock creation.
+ Raise default limits for content length and timeout.
+ Log output from hook.
[ Jonas Smedegaard ]
* Set Rules-Requires-Root: no.
* Declare compliance with Debian Policy 4.2.1.
* Update patch 2002.
* Update package relations:
+ Tighten (build-)dependency on python3-vobject.
+ (Build-)depend on recent python3-dateutil.
+ Fix build-depend explicitly on dh-python.
Closes: Bug#896738. Thanks to Adrian Bunk.
+ Fix have radicale depend on lsb-base.
Closes: Bug#850617. Thanks to Laurent Arnoud.
* Update copyright info:
+ Update an email address.
+ List upstream issue tracker as preferred contact.
* Add patch 2003 to hardcode version.
See https://github.com/Kozea/Radicale/issues/874.
* Fix set source path for generating manpage.
* Update Vcs-* fields: Source moved to Salsa.
* Limit (historic) NEWS entries to binary package radicale.
* Remove support for enabling radicale as system daemon in
/etc/default/radicale.
Add NEWS entry about the change.
* Improve autopkgtest: Use subdir for storage.
* Update package relations:
+ Fix (build-)depend on python3-tz.
Closes: Bug#886425. Thanks to Matthias Urlichs.
[ upstream ]
* New release 2.1.6:
+ Fix content-type of VLIST.
+ Specify correct COMPONENT in content-type of VCALENDAR.
+ Cache COMPONENT of calendar objects (improves speed with some
clients).
+ Stricter parsing of filters.
+ Improve support for CardDAV filter.
+ Fix some smaller bugs in CalDAV filter.
+ Add X-WR-CALNAME and X-WR-CALDESC to calendars downloaded via
HTTP/WebDAV.
+ Use X-WR-CALNAME and X-WR-CALDESC from calendars published via
WebDAV.
* New release 2.1.7:
+ Don't print warning when cache format changes.
+ Add documentation for BaseAuth.
+ Add is_authenticated2(login, user, password) to BaseAuth.
+ Fix names of custom properties in PROPFIND requests with
D:propname or D:allprop.
+ Return all properties in PROPFIND requests with D:propname or
D:allprop.
+ Allow D:displayname property on all collections.
+ Answer with D:unauthenticated for D:current-user-principal
property when not logged in.
+ Remove non-existing ICAL:calendar-color and C:calendar-timezone
properties from PROPFIND requests with D:propname or D:allprop.
+ Add D:owner property to calendar and address book objects.
+ Remove D:getetag and D:getlastmodified properties from regular
collections.
* New release 2.1.8:
+ Flush files before fsync'ing.
* Improve autopkgtest:
+ Setup i18nuser.
+ Disable unsupported COPY Method feature.
+ Rewrite serverinfo.xml creation as separate Perl script.
* Declare compliance with Debian Policy 4.1.3.
* Update package relations:
+ Fix (build-)depend on python3-pkg-resources.
Closes: Bug#872823. Thanks to Joerg Dorchain.
[ upstream ]
* New release 2.1.5:
+ Add --verify-storage command-line argument.
+ Allow comments in the htpasswd file.
+ Don't strip whitespaces from user names and passwords in the
htpasswd file.
+ Remove cookies from logging output.
+ Allow uploads of whole collections with many components.
+ Show warning message if server.timeout is used with Python release
lower than 3.5.2.
[ Jonas Smedegaard ]
* Drop no longer up-to-date documentation.
Reopens: bug#730044.
* Improve autopkgtest:
+ Disable unsupported features (not related tests).
+ Configure paths as /base_prefix/user-principal/collection/item.
+ Enable tests CalDAV/get.xml CalDAV/ical-client.xml
CardDAV/ab-client.xml.
* Fix resolve python-related dependencies and provisions, and drop
deprecated (and bogus, for python3 package) XB-Python-Version field.
Closes: Bug#867464. Thanks to Adrian Bunk.
* Declare compliance with Debian Policy 4.1.0.
[ upstream ]
* New release 2.1.3:
+ Enable timeout for SSL handshakes and move them out of the main
thread.
+ Create cache entries during upload of items.
+ Stop built-in server on Windows when Ctrl+C is pressed.
+ Prevent slow down when multiple requests hit a collection during
cache warm-up.
* New release 2.1.4:
+ Fix incorrect time range matching and calculation for some
edge-cases with rescheduled recurrences.
+ Fix owner property.
[ upstream ]
* New release:
+ Remove workarounds for bugs in VObject < 0.9.5.
+ Error checking of collection tags and associated components.
+ Improve error checking of uploaded collections and components.
+ Don't delete empty collection properties implicitly.
+ Improve logging of VObject serialization.
[ upstream ]
* New release:
+ Add missing UIDs instead of failing.
+ Improve error checking of calendar and address book objects.
+ Fix upload of whole address books.
[ Jonas Smedegaard ]
* Modernize cdbs:
+ Drop upstream-tarball hints: Use gbp import-orig --uscan.
* Update package relations:
+ Fix suggest (not only build-depend on) python3-bcrypt.
Mention python3-bcrypt in long description.
+ Fix mention python3-passlib (not python-passlib) in long description.
+ Fix mention apache2-utils in long description.
+ Declare binary (not only build-time) hints in rules file.
+ Tighten to (build-)depend on recent python3-vobject.
[ upstream ]
* New release(s).
[ Jonas Smedegaard ]
* Update copyright info:
+ Extend coverage for main upstream authors.
+ Remove obsolete authors.
+ Use https protocol in format string.
* Drop patch 1002: No longer applies.
* Update patch 2001: Drop parts that no longer applies.
* Unfuzz patch 2002.
* Extract metadata from graphics files before copyright check.
* Use path /run (not /var/run).
* Declare compliance with Debian Policy 4.0.0.
* Stop override lintian for
package-needs-versioned-debhelper-build-depends: Fixed in lintian.
* Update package relations:
+ Build-depend on python3-passlib python3-bcrypt.
* Tidy autopkgtest: Disable file locking.
[ upstream ]
* New prerelease.
+ Fix a CLI help description.
+ Use flup instead of flipflop to create the FastCGI application.
+ Correctly initialize the logger in the WSGI and FastCGI scripts.
+ Add random delay to httpauth authentication to avoid timing
oracles and simple bruteforce attacks.
[ Jonas Smedegaard ]
* Tidy autopkgtest:
+ Use testcaldav wrapper (not python script directly).
+ More efficiently express per-user access regex.
+ Disable fsync and password masking.
[ upstream ]
* New prerelease.
[ Jonas Smedegaard ]
* Update watch file:
+ Watch also for pre-releases.
+ Mangle upstream version to handle pre-releases.
* Update patch 2001:
+ Drop filesystem_folder-below-var part adopted upstream.
+ Use snakeoil certificate.
* Update patch 2002.
* Modernize cdbs:
+ Do copyright-check in maintainer script (not during build).
* Update package relations:
+ Have radicale recommend ssl-cert.
+ Stop build-depend on licensecheck.
* Improve autopkgtest:
+ Use custom access rights mimicking Calendarserver UUIDs in paths.
[ upstream ]
* Snapshot from upstream git.
[ upstream ]
* Snapshot from upstream git.
[ Jonas Smedegaard ]
* Update Vcs-Browser field: Use git (not cgit) in path.
* Update upstream cherry-picked documentation.
* Update copyright info: Extend coverage of packaging.
[ upstream ]
* Snapshot from upstream git.
[ upstream ]
* Snapshot from upstream git.
[ Jonas Smedegaard ]
* Drop patch 1001: Fixed upstream.
[ upstream ]
* Snapshot from upstream git.
[ Jonas Smedegaard ]
* Re-enable logging in autopkgtest.
* Unfuzz patches.
[ upstream ]
* Snapshot from upstream git.
[ Jonas Smedegaard ]
* Add patch 1001 to fix errorcode when deleting non-existing item.
* Drop CalDAV/implicitacls from core tests: Never truly succeeded.
[ upstream ]
* Snapshot from upstream git.
[ Jonas Smedegaard ]
* Drop patch 1001: Fixed upstream.
* Unfuzz patches.
[ upstream ]
* Snapshot from upstream git.
[ Jonas Smedegaard ]
* Use fake HOME during autopkgtests.
* Unfuzz patches.
* (Build-)depend on python3-atomicwrites.
* Build-depend on licensecheck (not devscripts).
[ upstream ]
* Snapshot from git master branch.
[ Jonas Smedegaard ]
* Shorten commands in README.source (strip gbp options set in config).
* Drop patch applied upstream.
* Unfuzz patches.
* Build only for python3 (not python 2.7).
* Update package relations:
+ (Build-)depend on python3-vobject.
+ Build-depend on python3-pytest (not python-pytest.
+ Suggest python3-passlib.
+ Stop suggest python-ldap python-pampy python-passlib
courier-authdaemon python-requests python-sqlalchemy
python-dulwich.
+ Stop build-depend on python-setuptools.
* Add patch 2001 to avoid arguably author-only tests.
* Use fake HOME for testsuite (both build and autopkgtest).
* Use multifilesystem storage and no logging for caldav-tester tests.
* Cleanup .eggs mess from running clean target while unpatched.
* Add patch cherry-picked upstream, to clean tests.
* Check upstream testsuite during build and in autopkgtest.
Build-depend on python-pytest.
* Fix generate manpage:
+ Have help2man rule emit output on failure.
+ Fix declare prerequisites for help2man rule.
+ Fix resolve PYTHONPATH more flexibly.
Closes: Bug#824129. Thanks to Chris Lamb.
[ upstream ]
* Snapshot from 1.1.x git branch.
+ Repair "head" request: Correct function name.
+ Fix the Collection._parse docstring.
+ Quick fix for multifilesystem:
- Use component names to filter duplicates.
- Also remove items from the collections itself.
[ Jonas Smedegaard ]
* Update watch file:
+ Modernize to use format 4.
+ Mention gbp in usage hint comment.
* Update git-buildpackage config: Filter any .git* file.
* Add section on getting upstream source to README.source.
* Update autopkgtest:
+ Fix FAIL_OK handling.
+ Print server log on failure.
* Update copyright info:
+ Fix alternate Github https URL.
+ Extend coverage of packaging.
* Improve autopkgtest:
+ Enable CalDAV/implicitacls.xml.
+ Fix allow output to stderr.
+ Fix avoid Validation-CalDAV (causes timeout).
* Add patch 1001 to fix return 404 when trying to delete a non
existing item.
Thanks to Guido Günther.
* Add pkgautotest.
Thanks to Guido Günther.
* Declare compliance with Debian Policy 3.9.8.
* Modernize Vcs-Git field URL: Use https protocol.
[ upstream ]
* New release(s).
Changed functionality:
+ Use the first matching section for rights.
Security fixes:
+ Improve the regex used for well-known URIs.
+ Prevent regex injection in rights management.
+ Prevent crafted HTTP request from calling arbitrary functions.
+ Improve URI sanitation and conversion to filesystem path.
+ Decouple the daemon from its parent environment.
Closes: bug#809920 (CVE-2015-8747 CVE-2015-8748). Thanks to Felix
Knecht.
Bugfixes and minor enhancements:
+ Assign new items to correct key.
+ Avoid race condition in PID file creation.
+ Improve the docker version.
+ Encode message and committer for git commits.
+ Test with Python 3.5.
[ Jonas Smedegaard ]
* Update TODOs.
* Add NEWS entry about changed access rights parsing logic.
* Drop patches now included upstream.
* Provide python3-radicale package.
* Update package relations:
Tighten build-dependencies on cdbs.
Build-depend on python3 and python3-setuptools.
* Add patch cherry-picked upstream to fix encoding of git commits.
* Add patch cherry-picked upstream to mention htpasswd encryption
methods md5 and bcrypt in config file.
* Fix lintian overrides.
* Bump debhelper compatibility level to 9.
* Add lintian override regarding debhelper 9.
[ upstream ]
* New upstream release.
+ Update the version because of a stupid "feature"™ of PyPI.
[ Jonas Smedegaard ]
* Modernize git-buildpackage config: Avoid git- prefix.
* Fix codename in 1.0-1 changelog entry.
[ upstream ]
* New release - codename "Sunflower".
+ Enhanced performances.
+ Add MD5-APR1 and BCRYPT for htpasswd-based authentication.
+ Use PAM service.
+ Don't discard PROPPATCH on empty collections.
+ Write the path of the collection in the git message.
+ Tests launched on Travis
[ Jonas Smedegaard ]
* Update package relations:
+ Suggest python-passlib.
+ Build-depend on python-setuptools.
* Update copyright info:
+ Extend coverage for upstream authors.
+ Use License-Grant and License-Reference fields.
Thanks to Ben Finney.
* Add lintian override regarding license in License-Reference field.
See bug#786450.
* Update Vcs-* fields.
* Update copyright info:
+ Extend coverage for myself.
+ Bump packaging license to GPL-3+.
[ upstream ]
* New release - codename "Lovely Endless Grass".
+ IMAP: don't spam the logs about non-SSL connections to localhost.
+ Fix owner-read-write rule in rights example file.
[ Jonas Smedegaard ]
* Revert to track upstream upstream releases (not specific snapshot).
* Declare compliance with Debian Policy 3.9.6.
[ upstream ]
* snapshot of not yet formally released changes.
+ Support well-known URLs.
+ Fix collection discovery.
+ Reload logger config on SIGHUP.
+ Remove props files when deleting a collection.
+ Support salted SHA1 passwords.
[ Jonas Smedegaard ]
* Temporarily track upstream git snapshot.
* Really improve short and long descriptions (missed in 0.9-1).
* Really suggest python-dulwich (missed in 0.9-1).
* Stop comment out defaults in configfile: Fixed upstream.
* Unfuzz patch 2001.
[ upstream ]
* New release - codename "Rivers".
+ Custom handlers for auth, storage and rights.
+ 1-file-per-event storage.
+ Git support for filesystem storages.
+ DB storage working with PostgreSQL, MariaDB and SQLite.
+ Clean rights manager based on regular expressions.
+ Support of contacts for Apple's clients.
+ Support colors.
+ Decode URLs in XML.
+ Fix PAM authentication.
+ Use consistent etags.
+ Use consistent sorting order.
+ Return 401 on unauthorized DELETE requests.
+ Move pid file creation in child process.
+ Allow requests without base_prefix.
[ Jonas Smedegaard ]
* Fix tidy execution bit and hashbang of FCGI and WSGI scripts.
* Update copyright info:
+ Add a copyright holder.
+ Add email of a copyright holder.
* Improve short and long descriptions.
* Suggest python-dulwich: Needed for git-tracked filesystem backend.
* Update patches.
* Update TODOs with references to upstream issue tracking.
* Include as normal files (not examples) WSGI and FCGI scripts and SQL
schema: They should be perfectly usable as-is.
Closes: Bug#682016. Thanks to Konstantin Khomoutov.
* Tidy SysV init file slightly.
* Fix allow read access for adm group to logfiles.
Thanks to Konstantin Khomoutov.
* Bump standards-version to 3.9.5.
* Include upstream documentation, fetched from Github.
Closes: Bug#730044. Thanks to W. Martin Borgert.
* Relax build-dependency on cdbs (likely was too tight due to a bug in
cdbs in checking Python build system was used from a subdir).
[ upstream ]
* New release.
+ New rights management; configurations need to be updated.
Closes: bug#676660.
[ Christian M. Amsüss ]
* Drop patch 0001: Applied upstream.
* Update patch 1001 to comment out new options, and refresh.
* Add myself as uploader.
[ Martín Ferrari ]
* Check DISABLED var before restarting. (Closes: #713936).
* Remove Default-Stop levels from the LHS initscript header.
Closes: bug#714165.
* Add FCGI and WSGI scripts as examples.
Related to bug#682016.
[ Jonas Smedegaard ]
* Adjust init script to allow stopping even when daemon disabled (only
skip start part of restart action, not also stop part).
* Bump debhelper compatibility to 8.
* Use anonscm.debian.org URL for Vcs-Git.
* Bump standards-version to 3.9.4.
* Fix use comment pseudo-sections in copyright file to obey silly
restrictions of copyright format 1.0.
* Have git-import-orig suppress upstream .gitignore file.
* Build-depend on devscripts, enabling copyright check always.
* Relax to build-depend unversioned on help2man: Needed version
satisfied even in oldstable.
* Update watch and rules files to directly use github.com URL (not
githubredir.debian.net).
* Stop tracking md5sum of upstream tarball.
* Install SQL schema file as example.
* Fix suggest python-pampy (not python-pam).
* Suggest python-requests (for http auth) and python-sqlalchemy (for
SQL storage).
* Non-maintainer upload. (Acknowledged by Jonas Smedegaard)
* Tighten dependency on python-radicale.
Make the Depends on python-radicale explicit on the binary package
version. (Closes: #699724)
* New upstream release.
[ Martin Stigge ]
* Remove build-dependency on python-dev. Not needed.
* Add myself to Uploaders:
* Remove build/ directory in clean target.
* Implement daemon handling:
+ Add postinst for creation of user and directory.
+ Add postrm to remove log and run dirs from /var.
+ Add initscript and defaults file
+ Patch configuration to fit daemon needs.
+ Add logrotate config file.
+ Depend on adduser.
* Comment out all config defaults to ease maintenance.
* Add patch 0001 to fix Iceowl support in newly created calendars,
cherry-picked from upstream VCS.
[ Jonas Smedegaard ]
* Update CDBS suppression for unneeded build-dependency on python-dev.
* Bump standards-version to 3.9.3.
* Simplify install files, as supported by debhelper 7.
* Use anonscm.debian.org for Vcs-Browser field.
* Extend my copyright for Debian packaging.
* Update copyright file:
+ Bump format to 1.0.
+ Fix double-indent in Copyright fields as per Policy §5.6.13.
+ Shorten GPL comments.
+ Quote license strings in comments.
+ Move reference to upstream licensing URL to topmost GPL comment.
+ Extend copyright years.
* Document authentication needs in long description.
Suggest apache2-utils python-ldap python-pam courier-authdaemon.
* Sync long descriptions with intro on upstream project website.
* Reduce patch and split into multiple ones to ease upstream adoption.
* Add --daemon and --pid options as default daemon arguments (and stop
patching similarly in config file).
* New upstream release.
* Use Github as upstream source.
* Drop dpkg-source local-options hint: Declared options are default
since dpkg-source 1.16.1.
* Bump debhelper compat level to 7.
* Fix install logging config file.
Closes: bug#655155. Thanks to Martin Stigge.
* New upstream release.
Closes: bug#640145.
* Drop all patches: applied upstream now.
* Use new default python helper (not deprecated python-support).
Tighten build-dependency on python and python-dev to versions
supporting it. Stop build-depending on python-support.
* Have radicale explicitly depend on python (though already satisfied
through python-radicale), to silence lintian.
* Update copyright file:
+ Rewrite using draft 174 of DEP-5 format.
+ Shorten license comments.
* Bump policy compliance to standards-version 3.9.2.
* Adjust source for upstream changed download URL:
+ Relax watch file regexp.
+ Update DEB_UPSTREAM_URL (used by CDBS get-orig-source target).
* Tighten build-dependency on cdbs.
* Build-depend unversioned on debhelper: Needed version satisfied even
in unstable.
* Ease building with git-buildpackage:
+ Git-ignore quilt .pc dir.
+ Add dpkg-source local-options.
* Ease backporting:
+ Avoid optional build-dependencies.
+ Bump down debhelper compat level to 6.
Relax build-dependency on debhelper accordingly.
+ Adjust CDBS usage to only optionally use new features.
Build-depend unversioned on cdbs.
Stop build-depending on devscripts.
* Build-depend on dh-buildinfo.
* Add patches 0001-0014 from upstream Git, for improved inter-
operability with MacOS, Windows and iPhone clients.
* Update copyright file:
+ Rewrite using Subversion rev.173 of draft DEP5 format.
* Use new default python helper (not deprecated python-support).
+ Stop explicitly setting python helper hint in rules file.
+ Tighten build-dependency on python and python-dev to versions
supporting it.
+ Stop build-depending on python-support.
* Have radicale explicitly depend on python (though already satisfied
through python-radicale), to silence lintian.
* New upstream release.
[ Jonas Smedegaard ]
* Install new global config file below /etc.
* Bump standards-version to 3.9.1.
* Tighten watch file to avoid git snapshot tarball.
* New upstream release.
* Fix watch file.
* Bump Policy compliance to Standards-Version 3.9.0.
* Fix tighten build-dependency on help2man to versions implementing
option --version-string.
* Generate manpage using script and library in destdir (not builddir).
* Ensure proper hash-bang in Python script.
* Fix append version to python dependency if using non-default
version.
* Fix have radicale depend on python-radicale.
* Fix use of ${python:Provides} (not bogus ${python:Replaces}) and
${python:Versions}.
* Initial release. Closes: bug#581979.