mini-httpd (1.30-13) unstable; urgency=medium

  * Adds chroot syscall exception to SystemCallFilter in the service.
    This allows operation in chroot mode when using the service.
    (Closes:  #1105097)
  * Update copyright years for debian scripts.

 -- Alexandru Mihail <alexandru.mihail2897@gmail.com>  Mon, 12 May 2025 18:25:39 +0300

mini-httpd (1.30-12) unstable; urgency=medium

  * Declare compliance with Standards-Version 4.7.2. (no changes required).
  * Document new systemd service and corresponding init.d
    script in the manpage.

 -- Alexandru Mihail <alexandru.mihail2897@gmail.com>  Sun, 09 Mar 2025 13:51:39 +0200

mini-httpd (1.30-11) unstable; urgency=medium

  * Added patch redirecting CGI script stderr output to /dev/null.
    This fixes CGI stderr output being sent to the client, which is not
    compliant with CGI RFC and breaks some sites.
    (Closes: #437932)
  * Added patch which starts logging CGI script invocations.
    This enables referrer analysis.
    (Closes: #516307)
  * Added a basic upstream/metadata tracking acme.com.

 -- Alexandru Mihail <alexandru.mihail2897@gmail.com>  Wed, 19 Jun 2024 23:02:24 +0300

mini-httpd (1.30-10) unstable; urgency=medium

  * Added patch improving handling of "charset=%s" in error pages
    and directory listing. Before, a literal "%s" was output as opposed to
    the actual charset. Now, the correct charset (UTF-8 for dirs and
    ISO-8859-1 for err) is output. Thanks again, Alexander Foken !
    (Closes: #714549)
  * Added a Systemd DocumentationKey entry fixing lintian warning. This
    points to the manpage for now.
  * Added SystemD hardening features to service. The directives
    I have provided should have no impact. I've confirmed no impact to
    basic functionality, vhosting, error pages and CGI. I managed to
    get the service to a "4.7 - OK" rating by using
    systemd-analyze security mini-httpd (all the way from 9.6).
    I have NOT enabled hardening features which have a high change of
    impacting functionality such as removing CAP_CHROOT which would
    mean mini_httpd's chroot mode of operation is forbidden.
    Help is welcome in improving these options (maybe someone with a
    security background could chip in).
  * Added a NEWS entry informing users of potential breakage due to
    new systemd hardening features.

 -- Alexandru Mihail <alexandru.mihail2897@gmail.com>  Tue, 16 Apr 2024 00:11:43 +0300

mini-httpd (1.30-9) unstable; urgency=medium

  * Added patch fixing NPH scripts (SSL) getting an additional
    HTTP/1.0 200 OK header before the actual expected one. This
    violates the CGI RFC (RFC-3875).
    (Closes: #1064656)
  * Merged branch fixing mini-httpd starting too early after reboot.
    This only happened using the old init.d script. The systemd service
    is not affected. Thanks, Jean !

 -- Alexandru Mihail <alexandru.mihail2897@gmail.com>  Fri, 08 Mar 2024 18:44:18 +0200

mini-httpd (1.30-8) unstable; urgency=medium

  * Modified mini-httpd.postinst to check if we're doing a
    fresh install or upgrading. Secondly, if we're fresh installing,
    the default index.html file is copied into /var/www/html only if
    no other index files are present (ex: index.cgi). This prevents
    the shipped index.html overwriting existing index.ext files.
    If we are upgrading, no files will be touched.
    (Closes: #1061792)
  * Removed erroneous duplicate "-C /etc/mini-httpd.conf" in
    systemd ExecStart. The "-C" call was already present in
    the EnvironmentFile (/etc/default/mini-httpd) read and
    used by the service. This resulted in mini-httpd's
    commandline containing the "-C" call twice.
    Thanks, Alexander Foken.

 -- Alexandru Mihail <alexandru.mihail2897@gmail.com>  Fri, 02 Feb 2024 19:42:56 +0200

mini-httpd (1.30-7) unstable; urgency=medium

  * Modified mini-httpd.postinst to not copy
    /usr/share/doc/mini-httpd/examples/index.html into
    /var/www/html/index.html if it's not readable,
    fixing weird edge cases where docker's dpkg
    cleans up /usr/share/*/examples beforehand,
    (Closes: #1061070)
  * Created 0011-fix-typo-in-documentation-maxage
    which clears confusion regarding the maxage
    config & cli option, the actual name for the
    variable being max_age in mini_httpd.c.
    The patch modifies documentation and
    help output to reflect this reality.
    (Closes: #1018900)

 -- Alexandru Mihail <alexandru.mihail2897@gmail.com>  Fri, 19 Jan 2024 21:09:00 +0200

mini-httpd (1.30-6) unstable; urgency=medium

  * Modified 0003-fix-change-index-document-root and
    0005-cgi-php to push index.mini-httpd.html to the end of known
    index.* array, modified install script to copy the provided
    index.html into /var/www/html/index.html,
    if not present (Closes: #1057842)
  * Moved package provided index.html file to
    /usr/share/doc/mini-httpd/examples, to avoid lintian warning regarding doc
    location

 -- Alexandru Mihail <alexandru.mihail2897@gmail.com>  Tue, 12 Dec 2023 00:00:53 +0200

mini-httpd (1.30-5) unstable; urgency=medium

  * Added patch stripping port numbers in vhost setup. (Closes: #491078).
  * Corrected systemd service not consuming /etc/default/mini-httpd
    configurations.
    Thanks a lot, Johannes Schauer Marin Rodrigues (Closes: #1051374).

 -- Alexandru Mihail <alexandru.mihail2897@gmail.com>  Thu, 21 Sep 2023 01:39:39 +0300

mini-httpd (1.30-4) unstable; urgency=medium

  * New maintainer. (Closes: #927950).
  * Declare compliance with Standards-Version 4.6.2. (no changes required).
  * Added systemd service (fixes lintian W:
    missing-systemd-service-for-init.d-script).
  * Changed rules to accommodate the included systemd service.
  * Removed dependency to empty obsolete package: lsb-base (Safe as we were
    only depending on LSB init scripts, superseded by the added systemd
    service and sysv-rc already depending on lsb-base in existing releases for
    non systemd systems).
  * Added missing Upstream-Contact and updated Copyright to reflect new
    Upstream contact email and added new mainainer copyright notice.
  * Clarified NCSA origins of mini-httpd htpasswd* by adding a corresponding
    copyright entry with proper attribution.

 -- Alexandru Mihail <alexandru.mihail2897@gmail.com>  Tue, 05 Sep 2023 01:29:43 +0300

mini-httpd (1.30-3) unstable; urgency=medium

  * QA upload.
  * Drop d/mini-httpd.manpages, installed with upstream Makefile.
    Closes: #1013614
  * d/rules:
    - Change target from 'override' to 'execute_after'.
    - Install upstream changelog under dh_installchangelogs target.
  * d/control:
    - Bump debhelper to 13.
    - Add space after comma in long description.
    - Document Rules-Requires-Root.
    - Update Standards-Version to 4.6.1
  * d/watch: Bump to version 4.
  * d/copyright: Change to secure URI.
  * d/upstream.changelog: Include missing release information, and remove
    end-of-line whitespace.
  * Change init system to not start on install, ref. lintian tag
    [init.d-script-should-always-start-service]. Default settings remains
    identical.

 -- Håvard F. Aasen <havard.f.aasen@pfft.no>  Wed, 20 Jul 2022 23:46:44 +0200

mini-httpd (1.30-2) unstable; urgency=medium

  * QA upload.
  * Upload to unstable.
  * [9a071ed3] Bump standards version to 4.4.0.
  * [8c12d482] Round-trip patches with gbp-pq.
  * [e89bd419] Do not strip binary during link phase.
  * [3637ba33] Add missing versioned dependency on init-system-helpers.
  * [d8a4302c] Bump debhelper compat to 12.

 -- Dmitry Bogatov <KAction@debian.org>  Fri, 12 Jul 2019 01:47:16 +0000

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog mini-httpd`.
