freeradius (3.2.7+dfsg-1ubuntu2) questing; urgency=medium

  * d/p/openssl-3.5.2-compat.patch (LP: #2122490)
    - Patch to fix compatibility with OpenSSL 3.5.2

 -- Ravi Kant Sharma <ravi.kant.sharma@canonical.com>  Wed, 10 Sep 2025 10:57:44 +0200

freeradius (3.2.7+dfsg-1ubuntu1) plucky; urgency=medium

  * d/rules & d/freeradius-utils.install
    remove `radlast` from builds. there is no `last` implementation available
    in oracular+ and compilation has become optional. (LP: #2096611)

 -- John Chittum <john.chittum@canonical.com>  Fri, 28 Feb 2025 07:28:14 -0500

freeradius (3.2.7+dfsg-1) unstable; urgency=medium

  * New upstream version 3.2.7+dfsg
    - add new module rlm_proxy_rate_limit.so
    - force building the radlast wrapper script although there currently
      is no "last" implementation in Debian capable to read the old
      wtmp format. Add d/NEWS.Debian to document this.
  * Revert "freeradius-utils: add wtmpdb needed for radlast"
  * Add mariadb dependency to obsolete init script (Closes: #1059490)
  * Remove obsolete files d/README.source and d/freeradius.NEWS
  * Refresh upstream signing key

 -- Bernhard Schmidt <berni@debian.org>  Mon, 10 Feb 2025 22:50:22 +0100

freeradius (3.2.6+dfsg-3) unstable; urgency=medium

  [ Bastien Roucariès ]
  * [CVE-2019-10143] Update logrotate file to be more in line with upstream
    (Closes: #929466)

  [ Arnaud Rebillout ]
  * freeradius-utils: add wtmpdb needed for radlast

  [ Santiago Ruano Rincón ]
  * Add Blast-RADIUS information in d/NEWS.Debian

  [ Bernhard Schmidt ]
  * Build-Depend on libwbclient-dev instead of samba-dev (Closes: #1064542)
  * Delete src/freeradius-devel in dh_clean (Closes: #1044654)
  * Drop obsolete d/README.Debian

 -- Bernhard Schmidt <berni@debian.org>  Sun, 05 Jan 2025 11:43:05 +0100

freeradius (3.2.6+dfsg-2) unstable; urgency=medium

  * Sourceful upload to sync the version in salsa with the version in
    the archive, looks like I accidentally uploaded an interim build.
  * Drop patches applied upstream

 -- Bernhard Schmidt <berni@debian.org>  Sat, 21 Dec 2024 14:37:25 +0100

freeradius (3.2.6+dfsg-1) unstable; urgency=medium

  * New upstream version 3.2.6+dfsg
  * d/tests: Use passlib.hash.sha512_crypt instead of deprecated crypt standard
    library (Closes: #1084635)

 -- Bernhard Schmidt <berni@debian.org>  Sun, 08 Dec 2024 14:54:06 +0100

freeradius (3.2.5+dfsg-3) unstable; urgency=medium

  [ Andreas Hasenack ]
  * Cherry-Pick from upstream: Replace radsecret with shell script to avoid
    dependency on extra perl modules (Closes: #1076458)

 -- Bernhard Schmidt <berni@debian.org>  Wed, 17 Jul 2024 22:44:55 +0200

freeradius (3.2.5+dfsg-2) unstable; urgency=medium

  * Fix parallel builds
  * Fix python3 autopkgtest
  * freeradius-utils: add perl modules needed for radsecret, run radsecret
    in autopkgtest instead of radlast (which needs wtmp)
  * d/freeradius.service: Use MemoryMax= instead of MemoryLimit=
    (Closes: #1072253)

 -- Bernhard Schmidt <berni@debian.org>  Wed, 10 Jul 2024 22:45:00 +0200

freeradius (3.2.5+dfsg-1) unstable; urgency=medium

  * New upstream version 3.2.5+dfsg
    This release adds a few hardening mitigations for the BlastRADIUS protocol
    vulnerability (CVE-2024-3596).
    - add new radsecret binary
    - add new rlm_dpsk and rlm_eap_teap modules
  * d/watch: Limit to 3.2 series

 -- Bernhard Schmidt <berni@debian.org>  Tue, 09 Jul 2024 23:31:16 +0200

freeradius (3.2.3+dfsg-2) unstable; urgency=medium

  * Don't build against libpcre3 (Closes: #1000031)
    FreeRADIUS will use Posix regular expressions

 -- Bernhard Schmidt <berni@debian.org>  Sun, 02 Jul 2023 22:23:21 +0200

freeradius (3.2.3+dfsg-1) unstable; urgency=medium

  * New upstream version 3.2.3+dfsg (Closes: #1032572)
    - Drop patches applied upstream
    - d/freeradius-redis.install: Include new rlm_cache_redis module
    - Unfuzz d/p/snakeoil-certs.diff
  * Bump Standards-Version, no changes necessary
  * Drop obsolete lsb-base dependency

 -- Bernhard Schmidt <berni@debian.org>  Fri, 23 Jun 2023 20:20:19 +0200

freeradius (3.2.1+dfsg-4) unstable; urgency=medium

  * Don't install symlink for cache_eap module no longer shipped
    (Closes: #1035853)

 -- Bernhard Schmidt <berni@debian.org>  Tue, 16 May 2023 00:04:23 +0200

freeradius (3.2.1+dfsg-3) unstable; urgency=medium

  * Cherry-pick upstream patch to fix partical CA support (Closes: #1032590)

 -- Bernhard Schmidt <berni@debian.org>  Fri, 10 Mar 2023 08:53:27 +0100

freeradius (3.2.1+dfsg-2) unstable; urgency=medium

  * Cherry-pick upstream fix for EAP-TTLS-MSCHAPv2 with TLSv1.3
    (Closes: #919234)

 -- Bernhard Schmidt <berni@debian.org>  Tue, 07 Mar 2023 22:51:06 +0100

freeradius (3.2.1+dfsg-1) unstable; urgency=medium

  * New upstream version 3.2.1+dfsg (Closes: #1025426)
  * Drop d/p/mkdirp.diff, fixed upstream
  * Drop d/p/python_config_script_update.diff, fixed upstream
  * Refresh patch
  * Fix lintian overrides
  * Bump debhelper to version 13, drop old dbgsym migration

 -- Bernhard Schmidt <berni@debian.org>  Wed, 28 Dec 2022 00:10:38 +0100

freeradius (3.2.0+dfsg-1) unstable; urgency=medium

  * Acknowledge NMU, thanks Andreas Metzler
  * New upstream version 3.2.0+dfsg (Closes: #1011041)
    - Drop rlm_{cram,otp} (removed upstream), add rlm_json
  * Refresh d/p/snakeoil-certs.diff
  * Refresh d/p/python_config_script_update.diff
  * Import test updates from Ubuntu, thanks Andreas Hasenack
    - Add test for rlm_python3 (LP: #1969381):
      - d/t/control: new rlm_python3 test
      - d/t/rlm_python3-test: test the rlm_python3 module
      - d/t/rlm_python3-data/*: test files
    - d/t/freeradius: run python tests in verbose mode
    - d/t/test-freeradius.py: test more authentication mechanisms

 -- Bernhard Schmidt <berni@debian.org>  Sat, 28 May 2022 22:24:26 +0200

freeradius (3.0.25+dfsg-1.1) unstable; urgency=low

  * Non-maintainer upload.
  * python_config_script_update.diff: Update configurre script in
    src/modules/rlm_python3 (aclocal + autoconf + cleanup), to fix breakage
    when built against python 3.10. Closes: #1008832

 -- Andreas Metzler <ametzler@debian.org>  Sat, 23 Apr 2022 15:43:51 +0200

freeradius (3.0.25+dfsg-1) unstable; urgency=medium

  [ Bernhard Schmidt ]
  * New upstream version 3.0.25+dfsg
    - rlm_eap_peap dropped upstream
    - rlm_sql_map and rlm_totp added
  * Fix a lot of lintian overrides

  [ Debian Janitor ]
  * Remove constraints unnecessary since buster

 -- Bernhard Schmidt <berni@debian.org>  Tue, 22 Feb 2022 22:38:13 +0100

freeradius (3.0.21+dfsg-3) unstable; urgency=medium

  * Acknowledge NMUs, thanks
  * Cherry-Pick upstream fix for a crash bug (Closes: #992036)
  * Cherry-Pick upstream fix to add missing continuation in postgresql
    sample config (Closes: #992207)

 -- Bernhard Schmidt <berni@debian.org>  Mon, 23 Aug 2021 15:49:43 +0200

freeradius (3.0.21+dfsg-2.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Don't fail postinst if daemon is not running (Closes: #991561, #932113)

 -- Jochen Sprickerhof <jspricke@debian.org>  Wed, 28 Jul 2021 12:28:32 +0200

freeradius (3.0.21+dfsg-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix capabilities in service file.
    As freeradius is not run as root we need to request extra capabilities
    wiht AmbientCapabilities instead of limiting the set with
    CapabilityBoundingSet. (Closes: #985967)

 -- Jochen Sprickerhof <jspricke@debian.org>  Fri, 23 Jul 2021 13:19:03 +0200

freeradius (3.0.21+dfsg-2) unstable; urgency=medium

  * Cherry-Pick upstream fixes to build with Python3.8 (Closes: #966860)
  * Drop migration code for versions earlier than oldstable (Squeeze)
  * Temporarily collectd integration (again) due to RC bugs
  * Bump to debhelper compat 10

 -- Bernhard Schmidt <berni@debian.org>  Mon, 24 Aug 2020 10:46:49 +0200

freeradius (3.0.21+dfsg-1) unstable; urgency=medium

  [ Bernhard Schmidt ]
  * New upstream version 3.0.21+dfsg
  * Sync freeradius.service with upstream, notable changes
    - run as unprivileged user freerad
    - use RuntimeDirectory (Closes: #954911)
    - set ReadOnlyDirectories to the configuration (Closes: #955206)
    - set some Protect* settings
    - enable reloading the configuration
  * Enable the control-socket site in autopkgtest and attempt a connection
    to validate the fix for #954911
  * Reenable collectd integration, it does not pull in the world anymore
    on sid, thanks to Bernd Zeimetz (Closes: #948996)

  [ Sven Hartge ]
  * d/freeradius.service: Drop manual chown, not necessary

 -- Bernhard Schmidt <berni@debian.org>  Wed, 01 Apr 2020 14:21:17 +0200

freeradius (3.0.20+dfsg-3) unstable; urgency=medium

  * Upload to unstable

 -- Bernhard Schmidt <berni@debian.org>  Mon, 09 Dec 2019 23:42:23 +0100

freeradius (3.0.20+dfsg-2) experimental; urgency=medium

  * Drop freeradius-python2, build experimental freeradius-python3
    (Closes: #936558)
  * Switch run-time tests to python3
  * Build with systemd support, use Type=notify in systemd unit
    (Closes: #920345)
  * Bump Standards-Version to 4.4.1, no changes needed

 -- Bernhard Schmidt <berni@debian.org>  Fri, 29 Nov 2019 23:54:37 +0100

freeradius (3.0.20+dfsg-1) unstable; urgency=medium

  * New upstream version 3.0.20+dfsg
  * Fix reload action on sysvinit (Closes: #940608)

 -- Bernhard Schmidt <berni@debian.org>  Fri, 29 Nov 2019 18:03:07 +0100

freeradius (3.0.19+dfsg-3) unstable; urgency=medium

  * Drop collectd integration from freeradius-utils - temporarily?
    collectd is marked for autoremoval at the end of August due to three
    RC bugs that do not show any recent activity (Bug#925849, Bug#926528,
    Bug#932299). Additionally, depending on libcollectdclient pulls in
    (with Recommends on collectd) 200 additional binary packages. See
    Bug#933296.

 -- Bernhard Schmidt <berni@debian.org>  Wed, 21 Aug 2019 17:11:40 +0200

freeradius (3.0.19+dfsg-2) unstable; urgency=medium

  * Import upstream patch to fix atomics FTBFS on armel etc (Closes: #933634)
  * Fix wrong wnpp Bug# in previous changelog
  * Drop patch files already applied upstream

 -- Bernhard Schmidt <berni@debian.org>  Thu, 01 Aug 2019 15:49:11 +0200

freeradius (3.0.19+dfsg-1) unstable; urgency=medium

  [ Sven Hartge ]
  * New upstream version 3.0.19+dfsg
  * Refresh and remove patches
    Removed:
     - disable-session-cache-CVE-2017-9148.patch
       Fixed Upstream
     - spelling-fixes.diff
       Applied Upstream
     - CVE-2019-11234-1.patch
     - CVE-2019-11234-2.patch
       Fixed Upstream
  * Add Salsa CI pipeline

  [ Bernhard Schmidt ]
  * Adopt package, help welcome. Thanks to Michael Stapelberg for working on
    freeradius so far (Closes: #923034)
  * Drop Josip from Uploaders (Closes: #842469)
  * Drop Stephen Gran from Uploaders (Closes: #838404)
  * Fix sysvinit stop by supplying executable to killproc.
    Thanks to Benjamin Boudoir (Closes: #931920)
  * Move to debian (former collab-maint) namespace on Salsa for easier
    collaborative maintainership, adjust Vcs-* fields
  * Override missing-dep-for-interpreter lintian error on shipped sample
    files in freeradius-config

 -- Bernhard Schmidt <berni@debian.org>  Mon, 29 Jul 2019 22:25:30 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog freeradius-config`.
