From: David Woodhouse Date: Fri, 3 Apr 2020 14:45:36 +0000 (+0100) Subject: Import debian/ directory X-Git-Url: https://www.infradead.org/git/?a=commitdiff_plain;h=0c08a44458e0436c1269e20d5e1538980934b34d;p=users%2Fdwmw2%2Fopenconnect-deb.git Import debian/ directory --- 0c08a44458e0436c1269e20d5e1538980934b34d diff --git a/debian/changelog b/debian/changelog new file mode 100644 index 0000000..4e7f936 --- /dev/null +++ b/debian/changelog @@ -0,0 +1,519 @@ +openconnect (8.06-1~bionic1) bionic; urgency=medium + + [ David Woodhouse ] + * New upstream version 8.06 + + -- David Woodhouse Thu, 2 Apr 2020 16:58:23 +0100 + +openconnect (8.05-1) unstable; urgency=medium + + [ Debian Janitor ] + * Use secure URI in Homepage field. + * Update standards version to 4.4.1, no changes needed. + + [ Luca Boccassi ] + * Update upstream source from tag 'upstream/8.05' (Closes: #935198) + * Drop patches, merged upstream in v8.05 + * Build-depend on Python3, v8.05 can build documentation with it now + (Closes: #937197) + * Set Rules-Requires-Root: no + * Bump Standards-Version to 4.5.0, no changes + * Add myself to Uploaders + * Addn Lintian override for hipreport-android.sh + * Drop rules for dbgsym migration + * Add libopenconnect.la to d/not-installed + + -- Luca Boccassi Thu, 19 Mar 2020 19:13:13 +0000 + +openconnect (8.02-1.1) unstable; urgency=medium + + * Non-maintainer upload. + * Close HTTPS connection on failure returns from process_http_response() + * Fix buffer overflow with chunked HTTP handling (CVE-2019-16239) + (Closes: #940871) + + -- Salvatore Bonaccorso Sat, 18 Jan 2020 23:37:24 +0100 + +openconnect (8.02-1) unstable; urgency=medium + + [ Mike Miller ] + * New upstream version 8.02 + * d/p/fix-ftbfs-ipv6-tclass-undeclared.patch: Drop patch, applied upstream + * d/u/signing-key.asc: Use export-minimal to compact upstream release + signing key + * d/watch: Bump format version to 4 + * Add autopkgtest to run the upstream test suite + + [ Daniel Lenski ] + * Update package descriptions to reflect multi-protocol support + + -- Mike Miller Fri, 25 Jan 2019 23:11:38 -0800 + +openconnect (8.01-1) unstable; urgency=medium + + * New upstream version 8.01 (Closes: #918529) + * Drop patches applied upstream or no longer needed + - d/p/add-logout-juniper.patch, applied upstream + - d/p/fix-tests-shell-syntax.patch, applied upstream + - d/p/softhsm2-module-workaround.patch, no longer needed + * d/libopenconnect5.{shlibs,symbols}: Update for new release + * d/libopenconnect5.symbols: Add Build-Depends-Package field + * d/openconnect.install: Include usr/libexec/openconnect shell scripts + * d/copyright: Refresh copyright information for new upstream release + * Add Build-Depends on libgcrypt20-dev, libtasn1-6-dev, and libtss2-dev + * Update Build-Depends on ocserv (>= 0.12.1-2) to fix failing unit tests + (Closes: #917715) + * Add Build-Depends on locales-all for new test + * Add Build-Depends on debhelper-compat, delete d/compat + * Bump debhelper compatibility level to 12 + * d/rules: + - Build with --disable-dsa-tests to skip DSA keys in unit tests + - Drop unsupported dh --list-missing option + - Include /usr/share/dpkg/pkg-info.mk for package version + - Drop cruft trying to save and restore generated source files + - Drop obsolete configure options --disable-static and --with-system-cafile + * d/clean: Delete autogenerated version.c on clean + * d/s/options: Ignore changes to tokens as a side effect of running tests + * Bump Standards-Version to 4.3.0, no changes needed + + -- Mike Miller Thu, 10 Jan 2019 11:54:02 -0800 + +openconnect (7.08-3) unstable; urgency=medium + + * d/p/add-logout-juniper.patch: New patch, add logout to Juniper VPN. + Thanks to Daniel Lenski (LP: #1655279) + + -- Mike Miller Sun, 25 Feb 2018 15:00:56 -0800 + +openconnect (7.08-2) unstable; urgency=medium + + * d/p/fix-ftbfs-ipv6-tclass-undeclared.patch: New patch, fix FTBFS on GNU/Hurd + * d/control, d/rules: Migrate to automatic dbgsym packages + * Bump debhelper compatibility level to 11 + * d/copyright: Bump copyright to 2018 for debian/* + * d/control: + - Mention Pulse Connect and Juniper in Description (Closes: #881338) + - Update Vcs-* fields for migration to salsa.d.o + - Bump Standards-Version to 4.1.3, no changes needed + + -- Mike Miller Fri, 23 Feb 2018 15:28:37 -0800 + +openconnect (7.08-1) unstable; urgency=medium + + * New upstream version 7.08 + - Fix MTU detection (Closes: #847135) + * d/libopenconnect5.{shlibs,symbols}: Update for new release + * d/p/juniper-content-length.patch: Drop, applied upstream + * d/p/fix-tests-shell-syntax.patch: Fix test suite shell bashisms + * d/p/softhsm2-module-workaround.patch: Hard-code Debian location of + libsofthsm2.so + * d/control: + - Add Build-Depends: libsocket-wrapper, libuid-wrapper, ocserv, openssl, and + softhsm2 for test suite + - Add Build-Depends: libpcsclite-dev to enable Yubikey support + (LP: #1649227) + - Add Build-Depends: dpkg-dev (>= 1.17.14) for build profiles support + - Drop obsolete Build-Depends: liboath-dev + - Reorder fields according to "cme fix dpkg-control" + * Bump debhelper compatibility level to 10 + * Drop explicit dependency on dh-autoreconf and disabling silent rules, now + enabled by default + + -- Mike Miller Sat, 24 Dec 2016 10:50:15 -0800 + +openconnect (7.07-2) unstable; urgency=medium + + * d/rules: Build with --as-needed to remove indirect lib dependencies + * d/control: Add Depends: liblz4-dev for libopenconnect-dev (Closes: 846706) + * d/control: Use canonical repository URL for Vcs-Browser + * d/copyright: Refresh copyright information + * d/copyright: Update Format using "cme fix dpkg-copyright" + + -- Mike Miller Thu, 08 Dec 2016 15:05:19 -0800 + +openconnect (7.07-1) unstable; urgency=medium + + * New upstream release. + - Fix spelling of "sí" in Spanish translation. (Closes: #792073) + - Fix handling of KMP message with --juniper. (Closes: #833466) + * Add Build-Depends on libkrb5-dev, enables GSSAPI support. (Closes: #830905) + * d/p/juniper-content-length.patch: Add Content-Length header to mimic + official pulse client. (Closes: #845184) + * Update libopenconnect5 shlibs and symbols files. + * debian/rules: Update list of distributed files to back up and restore. + * Use https URI for Vcs-* control fields. + * Bump Standards-Version to 3.9.8. No changes needed. + + -- Mike Miller Fri, 25 Nov 2016 12:22:01 -0800 + +openconnect (7.06-2) unstable; urgency=medium + + * Upload to unstable. + + -- Mike Miller Mon, 25 May 2015 17:32:01 -0400 + +openconnect (7.06-1) experimental; urgency=medium + + * New upstream release. (Closes: #776235) + * Bump libopenconnect soname (3 -> 5) and update symbols file. + * Add Build-Depends on liblz4-dev for LZ4 compression. + * debian/rules: + - Update list of distributed files to back up and restore. + - Ensure version.c gets the right upstream or Debian version string. + - Allow build rules to work on a git snapshot tree. + * debian/copyright: Refresh for new upstream release. + * Bump Standards-Version to 3.9.6. No changes needed. + + -- Mike Miller Sun, 05 Apr 2015 23:12:29 -0400 + +openconnect (6.00-2) unstable; urgency=medium + + * 01_fix-double-free.patch: Fix double free when PKCS#11 token does + not include CA certs. (Closes: #781240) Thanks to Laurent Bigonville. + + -- Mike Miller Thu, 26 Mar 2015 08:34:14 -0400 + +openconnect (6.00-1) unstable; urgency=medium + + * New upstream release, upload to unstable. + - Fix regression breaking PKCS#11 token support. (Closes: #744214, + LP: #1308054) + * doc-remove-footer.patch: Remove, applied upstream. + * Update libopenconnect3 shlibs and symbols files. + + -- Mike Miller Tue, 08 Jul 2014 22:33:31 -0400 + +openconnect (5.99-2) experimental; urgency=medium + + * Build against GnuTLS 3.x, drop OpenSSL. (Closes: #742755) + - Add Build-Depends on libgnutls28-dev rather than libgnutls-dev. + - Drop Build-Depends on libssl-dev. + - Remove OpenSSL-specific private function from libopenconnect3.symbols. + - fix-gnutls-2.x-build.patch: Drop patch no longer needed when building + against GnuTLS 3.x. + * Add Depends on liboath-dev for libopenconnect-dev. + * Add Build-Depends on libstoken-dev for RSA software token support. + * Build openconnect-dbg and libopenconnect3-dbg debug symbol packages. + * debian/rules: Back up and restore upstream files touched by dh-autoreconf. + * debian/upstream/signing-key.asc: Store upstream PGP signing key in + ASCII-armored format. + * Run wrap-and-sort on debian/control and debian/*.install. + + -- Mike Miller Thu, 03 Apr 2014 09:14:07 -0400 + +openconnect (5.99-1) experimental; urgency=medium + + * New upstream release. + * Bump libopenconnect soname (2 -> 3) and update symbols file. + * doc-remove-footer.patch: Refresh patch from upstream git commit. + * fix-gnutls-2.x-build.patch: Cherry-pick from upstream git to fix building + against GnuTLS 2.x. + * debian/copyright: Refresh for new upstream release. + + -- Mike Miller Thu, 06 Mar 2014 22:50:40 -0500 + +openconnect (5.03-1) unstable; urgency=medium + + * New upstream release. + + -- Mike Miller Tue, 11 Feb 2014 22:43:03 -0500 + +openconnect (5.02-1) unstable; urgency=medium + + * New upstream release. + - Temporarily disable XML POST if an authgroup dropdown exists. + (LP: #1229195) + * doc-remove-footer.patch: Remove footer from HTML doc template, it + links to images from www.w3.org. + * debian/control: Use lowercase for package synopsis. + * debian/copyright: Fix some omissions in the copyright listing. + * debian/rules: No need to explicitly set CFLAGS/CPPFLAGS/LDFLAGS. + * debian/watch: Add support for verification of PGP signature on + upstream release. + * Use my @debian.org address. + * Bump Standards-Version to 3.9.5. No changes needed. + + -- Mike Miller Sun, 12 Jan 2014 15:30:14 -0500 + +openconnect (5.01-1) unstable; urgency=low + + * New upstream release. + - Fix abuse of realloc() causing memory leaks. (Closes: #700805) + - Fix compatibility with certain connection forms. (Closes: #708207) + - Improve error handling when server closes connection. (Closes: #708928) + * Update shlibs and symbols files for libopenconnect2. + * debian/rules: Do not check for broken DTLS in OpenSSL, it has been + patched in the Debian openssl package. + * Add Build-Depends on liboath-dev. + * Add missing explicit dependency on zlib1g-dev + - Add Build-Depends on zlib1g-dev. + - Add Depends on zlib1g-dev to libopenconnect-dev. + + -- Mike Miller Sun, 02 Jun 2013 11:18:58 -0400 + +openconnect (4.99-2) unstable; urgency=low + + * Upload to unstable. + + -- Mike Miller Tue, 07 May 2013 19:46:22 -0400 + +openconnect (4.99-1) experimental; urgency=low + + * New upstream release (5.00 beta release). + * Update symbols file for libopenconnect2. + * Bump Standards-Version to 3.9.4. No changes needed. + * Remove obsolete DM-Upload-Allowed control field. + * Canonicalize Vcs-* control fields. + + -- Mike Miller Fri, 15 Feb 2013 09:14:15 -0500 + +openconnect (4.07-1) experimental; urgency=low + + * New upstream release. + + -- Mike Miller Sat, 01 Sep 2012 10:07:59 -0400 + +openconnect (4.06-1) experimental; urgency=low + + * New upstream release. + * debian/patches/01-Check-for-system-CA-certificate-file-for-GnuTLS.patch: + Remove, applied upstream. + + -- Mike Miller Mon, 23 Jul 2012 23:30:35 -0400 + +openconnect (4.05-1) experimental; urgency=low + + * New upstream release. + * Use dh-autoreconf to regenerate the build system. + * debian/patches/01-Check-for-system-CA-certificate-file-for-GnuTLS.patch: + Cherry-pick from upstream to allow configuring the default CA certificate + path. + * Configure with the path to the ca-certificates bundle. + * Add Recommends: ca-certificates to libopenconnect2 to use its provided + certificates by default. + * Build-depend on groff for building HTML docs. + + -- Mike Miller Sat, 21 Jul 2012 15:29:27 -0400 + +openconnect (4.04-1~exp1) experimental; urgency=low + + * New upstream release. (Closes: #677939) + * Remove 01_man-vpnc-script-path.patch, applied upstream. + * Bump libopenconnect soname (1 -> 2) and update symbols file. + * Build against GnuTLS. + - Build-depend on libgnutls-dev (>= 2.12.16). + - Build-depend on libp11-kit-dev. + - Still build-depend on libssl-dev for openconnect executable only. + * Enable verbose build (V=1) for more useful build logs. + * Bump debhelper compatibility to version 9. + * Set Multi-Arch: same and update library install paths for multiarch. + + -- Mike Miller Tue, 10 Jul 2012 23:21:17 -0400 + +openconnect (3.20-4) unstable; urgency=low + + * debian/patches/03_fix-abuse-of-realloc.patch: Backport patch from upstream + to fix possible memory leaks on realloc. (Closes: #700805) + + -- Mike Miller Thu, 28 Feb 2013 23:42:31 -0500 + +openconnect (3.20-3) unstable; urgency=low + + * debian/patches/02_CVE-2012-6128.patch: Backport patch from upstream to fix + buffer overflow (CVE-2012-6128). (Closes: #700794) + + -- Mike Miller Sun, 17 Feb 2013 11:56:35 -0500 + +openconnect (3.20-2) unstable; urgency=low + + * Depend on vpnc-scripts for routing and DNS configuration. (Closes: + #566193) + * Add 01_man-vpnc-script-path.patch to fix man page to match the + default vpnc-script path in Debian. + * Add DM-Upload-Allowed flag. + + -- Mike Miller Wed, 06 Jun 2012 08:45:27 -0400 + +openconnect (3.20-1) unstable; urgency=low + + * New upstream release. + * Update debian/copyright for 2012. + * Update libopenconnect1.symbols for versioned shared library ABI. + + -- Mike Miller Thu, 17 May 2012 22:06:31 -0400 + +openconnect (3.18-1) unstable; urgency=low + + * New upstream release + + -- Mike Miller Wed, 02 May 2012 21:02:47 -0400 + +openconnect (3.17-1) unstable; urgency=low + + * New upstream release + - Simplify install path for HTML docs + - Add required configuration path to vpnc script + * Use dpkg-buildflags for compiler options, support hardened build + * Add Vcs-* fields for the git repository + + -- Mike Miller Sat, 21 Apr 2012 08:48:41 -0400 + +openconnect (3.16-1) unstable; urgency=low + + * New upstream release + - Fix FTBFS on kfreebsd and hurd (Closes: #667996) + * Build and install HTML docs, copy the upstream changelog + * Fix Homepage address + * Remove debian/TODO, contents all done + + -- Mike Miller Mon, 09 Apr 2012 21:27:54 -0400 + +openconnect (3.15-2) unstable; urgency=low + + * Fix minimum version for shared library symbol + + -- Mike Miller Sat, 31 Mar 2012 09:38:14 -0400 + +openconnect (3.15-1) unstable; urgency=low + + * New maintainer + * New upstream release (Closes: #619967, #637362) + - Package new shared library, remove static library + - Remove fix-link.patch, already in 3.15 + * Update description from upstream homepage (Closes: #521831) + * Update debian/copyright to machine-readable format 1.0 + * Clean up package dependencies + - Add deps on libssl-dev and libxml2-dev for -dev package + - Add libproxy to build-deps and library deps + * Bump Standards-Version to 3.9.3 + + -- Mike Miller Wed, 28 Mar 2012 22:49:19 -0400 + +openconnect (3.02-2) unstable; urgency=low + + * Upload to unstable. + + -- Ross Burton Wed, 11 May 2011 11:55:34 +0100 + +openconnect (3.02-1) experimental; urgency=low + + * New upstream release + * Add patch from upstream to fix linking on Debian + + -- Ross Burton Wed, 11 May 2011 11:55:34 +0100 + +openconnect (2.25-0.1+squeeze2) stable-security; urgency=high + + * debian/patches/02_CVE-2012-6128.patch: Backport patch from upstream to fix + buffer overflow (CVE-2012-6128). + + -- Mike Miller Wed, 13 Feb 2013 19:55:03 -0500 + +openconnect (2.25-0.1+squeeze1) stable-security; urgency=high + + * Apply patch from upstream to fix buffer overflow (CVE-2012-3291) + + -- Mike Miller Thu, 14 Jun 2012 02:56:51 -0400 + +openconnect (2.25-0.1) unstable; urgency=low + + * Non-maintainer upload. + * New upstream release (Closes: #566188) + - always verify SSL server certificates (Closes: #590873) + + -- Dominic Hargreaves Sat, 28 Aug 2010 11:21:16 +0100 + +openconnect (2.22-1.1) unstable; urgency=low + + * Non-maintainer upload. + * Fix kFreeBSD detection (Closes: #577004) using patch from Petr Salinger + + -- Christoph Egger Sat, 17 Jul 2010 16:06:33 -0400 + +openconnect (2.22-1) unstable; urgency=low + + * New upstream release + + -- Rob Bradford Thu, 25 Mar 2010 16:11:35 +0000 + +openconnect (2.01-1) unstable; urgency=low + + * New upstream release. + + -- Ross Burton Wed, 24 Jun 2009 19:17:44 +0100 + +openconnect (2.00-1) unstable; urgency=low + + * New upstream release. + * Add fixes from upstream up to rev d45d92 + + -- Ross Burton Tue, 16 Jun 2009 15:32:46 +0100 + +openconnect (1.40-1) unstable; urgency=low + + * New upstream release. + + -- Ross Burton Wed, 27 May 2009 15:50:36 +0100 + +openconnect (1.00-1) unstable; urgency=low + + * New upstream release + - Remove leak.patch + * Reword the description + + -- Ross Burton Wed, 18 Mar 2009 10:45:13 +0000 + +openconnect (0.99-2) unstable; urgency=low + + * Add patch from upstream to fix chronic memory leak. + + -- Ross Burton Fri, 06 Feb 2009 15:50:54 +0000 + +openconnect (0.99-1) unstable; urgency=low + + * New upstream release. + * Update copyright information + * Add watch file + * Add Homepage field + + -- Ross Burton Thu, 15 Jan 2009 13:26:25 +0000 + +openconnect (0.98-3) unstable; urgency=low + + * Bump Standards + * Add misc:Depends + * Remove vpnc wrapper and depends + + -- Ross Burton Wed, 14 Jan 2009 12:21:50 +0000 + +openconnect (0.98-2) unstable; urgency=low + + * Disable the GTK+ UI, so that Network Manager support works. + + -- Ross Burton Wed, 14 Jan 2009 11:22:20 +0000 + +openconnect (0.98-1) unstable; urgency=low + + * New upstream release. + * Add more netmasks (thanks Shane Bryan) + + -- Ross Burton Sat, 15 Nov 2008 11:55:18 +0000 + +openconnect (0.96-1) unstable; urgency=low + + * New upstream release. + * Enable the GTK+ passcode dialog + + -- Ross Burton Tue, 28 Oct 2008 09:29:21 +0000 + +openconnect (0.95.1-2) unstable; urgency=low + + * Install the NM helper into the correct location. + + -- Ross Burton Fri, 24 Oct 2008 16:15:20 +0100 + +openconnect (0.95.1-1) unstable; urgency=low + + * Initial packaging. + + -- Ross Burton Thu, 23 Oct 2008 12:01:37 +0100 diff --git a/debian/clean b/debian/clean new file mode 100644 index 0000000..17435c8 --- /dev/null +++ b/debian/clean @@ -0,0 +1 @@ +version.c diff --git a/debian/compat b/debian/compat new file mode 100644 index 0000000..ec63514 --- /dev/null +++ b/debian/compat @@ -0,0 +1 @@ +9 diff --git a/debian/control b/debian/control new file mode 100644 index 0000000..77c09b8 --- /dev/null +++ b/debian/control @@ -0,0 +1,80 @@ +Source: openconnect +Maintainer: David Woodhouse +Section: net +Priority: optional +Build-Depends: debhelper (>= 9), + dpkg-dev (>= 1.17.14), + groff, + libgcrypt20-dev, + libgnutls28-dev, + libkrb5-dev, + liblz4-dev, + libp11-kit-dev, + libpcsclite-dev, + libproxy-dev, + libsocket-wrapper [!hurd-i386] , + libstoken-dev, + libtasn1-6-dev, + libuid-wrapper [!alpha !hurd-i386 !kfreebsd-amd64 !kfreebsd-i386] , + libxml2-dev, + locales-all , + ocserv [!hurd-i386 !kfreebsd-amd64 !kfreebsd-i386] , + openssl , + pkg-config, + python3, + softhsm2 [!hurd-i386] , + zlib1g-dev +Standards-Version: 4.5.0 +Rules-Requires-Root: no +Vcs-Browser: https://salsa.debian.org/debian/openconnect +Vcs-Git: https://salsa.debian.org/debian/openconnect.git +Homepage: https://www.infradead.org/openconnect/ + +Package: openconnect +Architecture: any +Depends: vpnc-scripts, ${misc:Depends}, ${shlibs:Depends} +Description: open client for Cisco AnyConnect, Pulse, GlobalProtect VPN + OpenConnect is an SSL VPN client initially created to support Cisco's + AnyConnect SSL VPN. It has since been extended to support the Pulse Connect + Secure VPN (formerly known as Juniper Network Connect or Junos Pulse) and + the Palo Alto Networks GlobalProtect SSL VPN. + . + A corresponding OpenConnect VPN server implementation can be found in the + ocserv package. + +Package: libopenconnect-dev +Architecture: any +Multi-Arch: same +Section: libdevel +Depends: libgnutls28-dev, + liblz4-dev, + libopenconnect5 (= ${binary:Version}), + libp11-kit-dev, + libpcsclite-dev, + libproxy-dev, + libstoken-dev, + libxml2-dev, + zlib1g-dev, + ${misc:Depends} +Description: open client for Cisco AnyConnect, Pulse, GlobalProtect VPN - development files + OpenConnect is an SSL VPN client initially created to support Cisco's + AnyConnect SSL VPN. It has since been extended to support the Pulse Connect + Secure VPN (formerly known as Juniper Network Connect or Junos Pulse) and + the Palo Alto Networks GlobalProtect SSL VPN. + . + This package provides the header and development files. + +Package: libopenconnect5 +Architecture: any +Multi-Arch: same +Section: libs +Depends: ${misc:Depends}, ${shlibs:Depends} +Recommends: ca-certificates +Pre-Depends: ${misc:Pre-Depends} +Description: open client for Cisco AnyConnect, Pulse, GlobalProtect VPN - shared library + OpenConnect is an SSL VPN client initially created to support Cisco's + AnyConnect SSL VPN. It has since been extended to support the Pulse Connect + Secure VPN (formerly known as Juniper Network Connect or Junos Pulse) and + the Palo Alto Networks GlobalProtect SSL VPN. + . + This package provides the shared library. diff --git a/debian/copyright b/debian/copyright new file mode 100644 index 0000000..39ebe14 --- /dev/null +++ b/debian/copyright @@ -0,0 +1,176 @@ +Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ +Upstream-Name: OpenConnect +Upstream-Contact: David Woodhouse +Source: ftp://ftp.infradead.org/pub/openconnect/ + +Files: * +Copyright: 2008-2016 Intel Corporation. + 2006 Reimar Doeffinger + 2008 Nick Andrew + 2012-2014 Kevin Cernekee + 2013-2016 Nikos Mavrogiannopoulos + 2013 John Morrissey + 2016 Red Hat, Inc. + 2016-2018 Daniel Lenski + 2017-2018 James Bottomley + 2018 David Woodhouse +License: LGPL-2.1 + +Files: compat.c +Copyright: 2007, 2010, Nathan C. Myers +License: BSD-3-clause + +Files: gnutls_tpm2_esys.c +Copyright: 2017-2018, Fraunhofer SIT sponsored by Infineon Technologies AG +License: BSD-3-clause-Fraunhofer + +Files: android/run_pie.c +Copyright: 2014 The Chromium Authors +License: BSD-3-clause-Google + +Files: tests/dtls-psk + tests/ns.sh + tests/sigterm +Copyright: 2018 Nikos Mavrogiannopoulos +License: GPL-2+ + +Files: www/html.py +Copyright: 2005 Thomas Gleixner +License: GPL-2 + +Files: debian/* +Copyright: 2012-2019 Mike Miller + 2008-2011 Ross Burton +License: GPL-2+ + +License: GPL-2 + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License version 2, as + published by the Free Software Foundation. + . + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + . + You should have received a copy of the GNU General Public License along + with this program; if not, write to the Free Software Foundation, Inc., + 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. + . + On Debian systems, the complete text of the GNU General Public + License version 2 can be found in `/usr/share/common-licenses/GPL-2'. + +License: GPL-2+ + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 2 of the License, or + (at your option) any later version. + . + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + . + You should have received a copy of the GNU General Public License along + with this program; if not, write to the Free Software Foundation, Inc., + 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. + . + On Debian systems, the complete text of the GNU General Public + License version 2 can be found in `/usr/share/common-licenses/GPL-2'. + +License: LGPL-2.1 + This library is free software; you can redistribute it and/or + modify it under the terms of the GNU Lesser General Public + License version 2.1, as published by the Free Software Foundation. + . + This library is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + . + You should have received a copy of the GNU Lesser General Public + License along with this library; if not, write to the Free Software + Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA + . + On Debian systems, the full text of the GNU Lesser General Public + License version 2.1 can be found in `/usr/share/common-licenses/LGPL-2.1'. + +License: BSD-3-clause + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions are met: + . + Redistributions of source code must retain the above copyright notice, + this list of conditions and the following disclaimer. + . + Redistributions in binary form must reproduce the above copyright notice, + this list of conditions and the following disclaimer in the documentation + and/or other materials provided with the distribution. + . + The name of the author must not be used to endorse or promote products + derived from this software without specific prior written permission. + . + THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" + AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE + LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR + CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF + SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS + INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN + CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) + ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE + POSSIBILITY OF SUCH DAMAGE. + +License: BSD-3-clause-Fraunhofer + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions are met: + . + 1. Redistributions of source code must retain the above copyright notice, + this list of conditions and the following disclaimer. + . + 2. Redistributions in binary form must reproduce the above copyright notice, + this list of conditions and the following disclaimer in the documentation + and/or other materials provided with the distribution. + . + 3. Neither the name of tpm2-tss-engine nor the names of its contributors + may be used to endorse or promote products derived from this software + without specific prior written permission. + . + THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" + AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE + LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR + CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF + SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS + INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN + CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) + ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF + THE POSSIBILITY OF SUCH DAMAGE. + +License: BSD-3-clause-Google + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions are + met: + . + * Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + * Redistributions in binary form must reproduce the above + copyright notice, this list of conditions and the following disclaimer + in the documentation and/or other materials provided with the + distribution. + * Neither the name of Google Inc. nor the names of its + contributors may be used to endorse or promote products derived from + this software without specific prior written permission. + . + THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS + "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT + LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR + A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT + OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, + SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT + LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, + DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY + THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT + (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE + OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. diff --git a/debian/gbp.conf b/debian/gbp.conf new file mode 100644 index 0000000..cec628c --- /dev/null +++ b/debian/gbp.conf @@ -0,0 +1,2 @@ +[DEFAULT] +pristine-tar = True diff --git a/debian/gitlab-ci.yml b/debian/gitlab-ci.yml new file mode 100644 index 0000000..5c575a1 --- /dev/null +++ b/debian/gitlab-ci.yml @@ -0,0 +1,6 @@ +include: + - https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/salsa-ci.yml + - https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/pipeline-jobs.yml + +variables: + RELEASE: 'unstable' diff --git a/debian/libopenconnect-dev.install b/debian/libopenconnect-dev.install new file mode 100644 index 0000000..b3ea361 --- /dev/null +++ b/debian/libopenconnect-dev.install @@ -0,0 +1,3 @@ +usr/include +usr/lib/*/libopenconnect.so +usr/lib/*/pkgconfig diff --git a/debian/libopenconnect5.install b/debian/libopenconnect5.install new file mode 100644 index 0000000..2cf7597 --- /dev/null +++ b/debian/libopenconnect5.install @@ -0,0 +1 @@ +usr/lib/*/libopenconnect.so.* diff --git a/debian/libopenconnect5.shlibs b/debian/libopenconnect5.shlibs new file mode 100644 index 0000000..27b6d3a --- /dev/null +++ b/debian/libopenconnect5.shlibs @@ -0,0 +1 @@ +libopenconnect 5 libopenconnect5 (>= 8.01) diff --git a/debian/libopenconnect5.symbols b/debian/libopenconnect5.symbols new file mode 100644 index 0000000..71829f9 --- /dev/null +++ b/debian/libopenconnect5.symbols @@ -0,0 +1,94 @@ +libopenconnect.so.5 libopenconnect5 #MINVER# +* Build-Depends-Package: libopenconnect-dev + OPENCONNECT_5.0@OPENCONNECT_5.0 7.00 + OPENCONNECT_5_1@OPENCONNECT_5_1 7.05 + OPENCONNECT_5_2@OPENCONNECT_5_2 7.05 + OPENCONNECT_5_3@OPENCONNECT_5_3 7.07 + OPENCONNECT_5_4@OPENCONNECT_5_4 7.08 + OPENCONNECT_5_5@OPENCONNECT_5_5 8.01 + OPENCONNECT_PRIVATE@OPENCONNECT_PRIVATE 6.00 + openconnect_check_peer_cert_hash@OPENCONNECT_5.0 7.00 + openconnect_clear_cookie@OPENCONNECT_5.0 7.00 + openconnect_disable_ipv6@OPENCONNECT_5_3 7.07 + openconnect_fopen_utf8@OPENCONNECT_PRIVATE 7.00 + openconnect_free_cert_info@OPENCONNECT_5.0 7.00 + openconnect_free_peer_cert_chain@OPENCONNECT_5_3 7.07 + openconnect_free_supported_protocols@OPENCONNECT_5_5 8.01 + openconnect_get_cookie@OPENCONNECT_5.0 7.00 + openconnect_get_cstp_cipher@OPENCONNECT_5.0 7.00 + openconnect_get_cstp_compression@OPENCONNECT_5_3 7.07 + openconnect_get_dnsname@OPENCONNECT_5_3 7.07 + openconnect_get_dtls_cipher@OPENCONNECT_5.0 7.00 + openconnect_get_dtls_compression@OPENCONNECT_5_3 7.07 + openconnect_get_hostname@OPENCONNECT_5.0 7.00 + openconnect_get_idle_timeout@OPENCONNECT_5_5 8.01 + openconnect_get_ifname@OPENCONNECT_5.0 7.00 + openconnect_get_ip_info@OPENCONNECT_5.0 7.00 + openconnect_get_peer_cert_DER@OPENCONNECT_5.0 7.00 + openconnect_get_peer_cert_chain@OPENCONNECT_5_3 7.07 + openconnect_get_peer_cert_details@OPENCONNECT_5.0 7.00 + openconnect_get_peer_cert_hash@OPENCONNECT_5.0 7.00 + openconnect_get_port@OPENCONNECT_5.0 7.00 + openconnect_get_protocol@OPENCONNECT_5_5 8.01 + openconnect_get_supported_protocols@OPENCONNECT_5_5 8.01 + openconnect_get_urlpath@OPENCONNECT_5.0 7.00 + openconnect_get_version@OPENCONNECT_5.0 7.00 + openconnect_has_oath_support@OPENCONNECT_5.0 7.00 + openconnect_has_pkcs11_support@OPENCONNECT_5.0 7.00 + openconnect_has_stoken_support@OPENCONNECT_5.0 7.00 + openconnect_has_system_key_support@OPENCONNECT_5.0 7.00 + openconnect_has_tss2_blob_support@OPENCONNECT_5_5 8.01 + openconnect_has_tss_blob_support@OPENCONNECT_5.0 7.00 + openconnect_has_yubioath_support@OPENCONNECT_5.0 7.00 + openconnect_init_ssl@OPENCONNECT_5.0 7.00 + openconnect_mainloop@OPENCONNECT_5.0 7.00 + openconnect_make_cstp_connection@OPENCONNECT_5.0 7.00 + openconnect_obtain_cookie@OPENCONNECT_5.0 7.00 + openconnect_open_utf8@OPENCONNECT_PRIVATE 7.00 + openconnect_override_getaddrinfo@OPENCONNECT_5_3 7.07 + openconnect_parse_url@OPENCONNECT_5.0 7.00 + openconnect_passphrase_from_fsid@OPENCONNECT_5.0 7.00 + openconnect_reset_ssl@OPENCONNECT_5.0 7.00 + openconnect_set_cafile@OPENCONNECT_5.0 7.00 + openconnect_set_cancel_fd@OPENCONNECT_5.0 7.00 + openconnect_set_cert_expiry_warning@OPENCONNECT_5.0 7.00 + openconnect_set_client_cert@OPENCONNECT_5.0 7.00 + openconnect_set_compression_mode@OPENCONNECT_5_1 7.05 + openconnect_set_csd_environ@OPENCONNECT_5.0 7.00 + openconnect_set_dpd@OPENCONNECT_5.0 7.00 + openconnect_set_hostname@OPENCONNECT_5.0 7.00 + openconnect_set_http_auth@OPENCONNECT_5_2 7.05 + openconnect_set_http_proxy@OPENCONNECT_5.0 7.00 + openconnect_set_key_password@OPENCONNECT_5_5 8.01 + openconnect_set_localname@OPENCONNECT_5_3 7.07 + openconnect_set_loglevel@OPENCONNECT_5_1 7.05 + openconnect_set_mobile_info@OPENCONNECT_5.0 7.00 + openconnect_set_option_value@OPENCONNECT_5.0 7.00 + openconnect_set_pass_tos@OPENCONNECT_5_4 7.08 + openconnect_set_pfs@OPENCONNECT_5.0 7.00 + openconnect_set_protect_socket_handler@OPENCONNECT_5.0 7.00 + openconnect_set_protocol@OPENCONNECT_5_2 7.05 + openconnect_set_proxy_auth@OPENCONNECT_5.0 7.00 + openconnect_set_reconnected_handler@OPENCONNECT_5_3 7.07 + openconnect_set_reported_os@OPENCONNECT_5.0 7.00 + openconnect_set_reqmtu@OPENCONNECT_5.0 7.00 + openconnect_set_setup_tun_handler@OPENCONNECT_5.0 7.07 + openconnect_set_stats_handler@OPENCONNECT_5.0 7.00 + openconnect_set_stoken_mode@OPENCONNECT_5.0 7.00 + openconnect_set_system_trust@OPENCONNECT_5.0 7.00 + openconnect_set_token_callbacks@OPENCONNECT_5.0 7.00 + openconnect_set_token_mode@OPENCONNECT_5.0 7.00 + openconnect_set_urlpath@OPENCONNECT_5.0 7.00 + openconnect_set_version_string@OPENCONNECT_5_5 8.01 + openconnect_set_xmlpost@OPENCONNECT_5.0 7.00 + openconnect_set_xmlsha1@OPENCONNECT_5.0 7.00 + openconnect_setup_cmd_pipe@OPENCONNECT_5.0 7.00 + openconnect_setup_csd@OPENCONNECT_5.0 7.00 + openconnect_setup_dtls@OPENCONNECT_5.0 7.00 + openconnect_setup_tun_device@OPENCONNECT_5.0 7.00 + openconnect_setup_tun_fd@OPENCONNECT_5.0 7.00 + openconnect_setup_tun_script@OPENCONNECT_5.0 7.00 + openconnect_sha1@OPENCONNECT_PRIVATE 6.00 + openconnect_version_str@OPENCONNECT_PRIVATE 6.00 + openconnect_vpninfo_free@OPENCONNECT_5.0 7.00 + openconnect_vpninfo_new@OPENCONNECT_5.0 7.00 diff --git a/debian/not-installed b/debian/not-installed new file mode 100644 index 0000000..5585ea8 --- /dev/null +++ b/debian/not-installed @@ -0,0 +1 @@ +usr/lib/*/libopenconnect.la diff --git a/debian/openconnect.NEWS b/debian/openconnect.NEWS new file mode 100644 index 0000000..a278d41 --- /dev/null +++ b/debian/openconnect.NEWS @@ -0,0 +1,8 @@ +openconnect (3.20-2) unstable; urgency=low + + OpenConnect is now configured to use the script provided by the vpnc-scripts + package by default. If you were downloading this script as suggested by the + OpenConnect documentation, you can now use it as shipped in Debian without + any custom configuration. + + -- Mike Miller Wed, 06 Jun 2012 08:45:27 -0400 diff --git a/debian/openconnect.doc-base b/debian/openconnect.doc-base new file mode 100644 index 0000000..be8b649 --- /dev/null +++ b/debian/openconnect.doc-base @@ -0,0 +1,9 @@ +Document: openconnect +Title: OpenConnect VPN Client +Author: David Woodhouse +Abstract: User and developer documentation for the OpenConnect VPN client. +Section: Network/Communication + +Format: HTML +Index: /usr/share/doc/openconnect/html/index.html +Files: /usr/share/doc/openconnect/html/*.html diff --git a/debian/openconnect.install b/debian/openconnect.install new file mode 100644 index 0000000..2db0e61 --- /dev/null +++ b/debian/openconnect.install @@ -0,0 +1,5 @@ +usr/lib/*-*/openconnect/*.sh +usr/sbin +usr/share/doc/openconnect/html +usr/share/locale +usr/share/man diff --git a/debian/openconnect.lintian-overrides b/debian/openconnect.lintian-overrides new file mode 100644 index 0000000..c25a731 --- /dev/null +++ b/debian/openconnect.lintian-overrides @@ -0,0 +1,2 @@ +# This script is intended to be ran on Android distributions. +openconnect: wrong-path-for-interpreter usr/libexec/openconnect/hipreport-android.sh (#!/system/bin/sh != /bin/sh) diff --git a/debian/rules b/debian/rules new file mode 100755 index 0000000..20843c1 --- /dev/null +++ b/debian/rules @@ -0,0 +1,29 @@ +#!/usr/bin/make -f + +include /usr/share/dpkg/pkg-info.mk + +export DEB_BUILD_MAINT_OPTIONS = hardening=+all + +# Link with --as-needed to eliminate unused or indirect library dependencies +export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed + +%: + dh $@ + +override_dh_auto_configure: + dh_auto_configure -- \ + --disable-dsa-tests \ + --htmldir=/usr/share/doc/openconnect/html \ + --with-gnutls \ + --with-vpnc-script=/usr/share/vpnc-scripts/vpnc-script + $(MAKE) version.c + sed -i -e 's|".*"|"v$(DEB_VERSION)"|' version.c + +override_dh_installchangelogs: + dh_installchangelogs www/changelog.html + +override_dh_compress: + dh_compress -Xhtml/changelog.html + +override_dh_autoreconf: + dh_autoreconf --as-needed diff --git a/debian/tests/control b/debian/tests/control new file mode 100644 index 0000000..7154937 --- /dev/null +++ b/debian/tests/control @@ -0,0 +1,7 @@ +Tests: upstream-test-suite +Depends: @, + libsocket-wrapper, + libuid-wrapper, + locales-all, + ocserv (>= 0.12.1-2), + softhsm2 diff --git a/debian/tests/upstream-test-suite b/debian/tests/upstream-test-suite new file mode 100755 index 0000000..992b0f4 --- /dev/null +++ b/debian/tests/upstream-test-suite @@ -0,0 +1,63 @@ +#!/bin/sh +# +# upstream-test-suite - Run the upstream test suite on the installed binary +# Copyright (C) 2019 Mike Miller +# +# This program is free software; you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation; either version 2 of the License, or +# (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License along +# with this program; if not, write to the Free Software Foundation, Inc., +# 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. + +# This is the installed path to OpenConnect to be tested +export OPENCONNECT=/usr/sbin/openconnect + +# Make a copy of the tests directory from the source package +topdir=$AUTOPKGTEST_TMP +testdir=$topdir/tests +mkdir -p $testdir +cp -a tests/* $testdir +cd $testdir + +# Save test script output in the autopkgtest artifact directory +logdir=$AUTOPKGTEST_ARTIFACTS/log +mkdir -p $logdir + +# Emulate running configure substitutions on .in files needed by tests +for fn in configs/test-user-cert.config configs/test-user-pass.config softhsm2.conf; do + sed -e 's|@abs_top_srcdir@|'$topdir'|g' \ + -e 's|@top_srcdir@|'$topdir'|g' \ + -e 's|@OCSERV_USER@|'$(id -un)'|g' \ + -e 's|@OCSERV_GROUP@|'$(id -gn)'|g' \ + $fn.in > $fn +done + +ec_keys=$(ls certs/ec-key-*) +user_keys=$(ls certs/user-key-* | grep -Ev 'pbes2-sha256|md5-des|nonascii') + +# Replicate the environment expected by the test scripts in 'make check' +export key_list="$user_keys $ec_keys" +export pkcs11_keys="object=RSA id=%01 object=EC id=%03" +export pkcs11_tokens="openconnect-test openconnect-test1 openconnect-test2" + +# Run the test scripts in sequence, exiting at the end if any fail +status=0 +for s in auth-certificate auth-nonascii auth-pkcs11 auth-username-pass id-test; do + sh $s > $logdir/$s.log 2>&1 + if [ $? -eq 0 ]; then + echo "PASS: $s" + else + echo "FAIL: $s" + status=1 + fi +done + +exit $status diff --git a/debian/upstream/signing-key.asc b/debian/upstream/signing-key.asc new file mode 100644 index 0000000..1786f51 --- /dev/null +++ b/debian/upstream/signing-key.asc @@ -0,0 +1,89 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBE6NcQEBEADN5LtGr/flvrjd17mCOlqtRB26tj6G4jAc5VURYbejQGbbYzP5 +L+fCLfDo01MYLI6jffklfpcDRHh2r/ACvA+NBTTVrP+XX8+s8+Y49Ke/39rt4NUW +C/t9UaIkV+0gP3DPYQA2GseOGwaF8V7v3BXq6VrwoyV2KlD4vAYUahJ52VxsZG+/ +IhrvZn2MjmAyb1fjzZYr/7GX568CKdRY5VaVFqLKXdC7ZzRZObgzR83zaa3coC7l +3cFRtmGRmttDgUJ8R3Oqp2X9oe+eylzpmndEZkzGPZiI90VmZchvt1XUJ/VRpRwP +xmJvrz+NJWVktzDU1koauyOmiyB2cO6+RcSMaoQIX+TpyqJZ96rd6KsHCyTodF39 +3xs730V24pRJXSbqJpyBNTOjd2T856MI9CIQ0SRvTUJGsp4x82j+3rJvSKGTClPw +FOJkJ0KaQyPMIaudP0PdsqULSoHXiBk3k+yj6tg9Ca84TrsSrLx1fvM4sAZpqo5p +LriDbl7ji6tUZovqW06MRT7rFCMjJW0Bk8jPp2r/5ASdjv33Ljxvr+9weYHJ5/rN +J9MUVw3rXmyDbUh7+uAm/2e24z26xE6LsxJB8JzdRqRSMqXdf8JsiuQLWpKZBwYo +hLD+EKK+bfpqvTAHH39XLPz+Hx1Pyg3+nkcQJIHsZOiH5uneQyf5oId0MQARAQAB +tCBEYXZpZCBXb29kaG91c2UgPGR3bXcyQGV4aW0ub3JnPokCOAQTAQIAIgIbAwIe +AQIXgAUCTs/EuAYLCQgHAwIGFQgCCQoLBBYCAwEACgkQY3Ys2mfi81mGbhAAsQFh +PtgUJ7LCzADc8fzyH3nW6JrcJzkafhcEptDFBDhBFYeStGGYg1GpztIwFR/FS1id +P5Pb8SLTs61HMpfUCMo3viYX6nuzyLskIza3spz7/FIhkiGnCBt/g46O1RDdEmhi +OUv6R7xiiZfqB4xlX8hc3aeqPhrwJiSbNcKLZ2Du5Z/y/+n+HKT8MtiUP4fDGlEb +oA1SRDrPFPGCfPCKGueFo2y7Y8CdYmj0b9N+Tyjkm5NEGfmoavtLJDQ9QbmzwPYg ++AxoAEeGmhP2Zi9U66d2ugLZHK6xL3HOtMkL4ES8tn4neJ0C9Pv9N+Mm46s+mSvY +FQhlivgwX5pwbRBBSy2wl2ntXbuIg003SOaXJtsKXtGIg7ycJJ9VGyyApt8kydOG +8waNhJIU9TPbmAiAf3m3xr/asZHmecElBht37VOiPS+pzg8i5IAuTxsX9+vSzUPA +pQkaBuJRgDiaghjXrmF7v9FUZXCbmozj1iBJolbCKe0MIajHuQMkwF87PWfQVWLk +ssYIeZaiwu38JGlv4X6vSLHaDh3mQhT8l51PWRTx066AtVvlsu6KwrbyHknTqTjx +V9OTORKM5vw2fjDurvxFRnbPHw3Lljn4EUQq2a7sGz0/Ozrr3wMdJp5nOoi5JOCf +x127yIGMdkX+zDvCtk7XPZwqPoVbpsx6f9tf4du0IkRhdmlkIFdvb2Rob3VzZSA8 +ZGF2aWRAd29vZGhvdS5zZT6JAjgEEwECACICGwMCHgECF4AFAk7PxLgGCwkIBwMC +BhUIAgkKCwQWAgMBAAoJEGN2LNpn4vNZtHsP/iEpR+HThMsPZkWwhbGuAQT/rrWU +dphk2L+skCSFfvf5uk8/lpW5aKq8WRhtwi8Dj4/NKLwpe4qItJvG1QOCoEo9Yj1m +HZw6PZiSX/5Cqn5MA+eNN17n6Vz74xSbsrRBTYIlBnC9HCcu3Ay+qyPt2UXfs3jq +hI6pw9volGwOYmaglSfXKVmGPKzSoDD0D7dVXFcghpyx/s7Gv7lUMxMmbJyV8bBu +wAATJhgSCilDZHxn5sQ5VN0NhILTnWg7QpQeJ1tEZTz+6fvIzxEW1lKg+nzw7jB1 +bKv3FtqFKvgtgiag1QakktBAp/4S0wjikohMOzk2SXxLqr8aSHyeGqV65VD+NPfl +STRPWrOFf7wRpQCzgGn+RQnnQr5XoLjAEwQKgwMdfK+aCQoKRvXyDu0yC/V5reBl +dw5TsxS+GBLNyd0spmL61oZOCY75s0106cDUwDEwmmhTjlxalXI+nmdSDUTn+OhA +Zb1UMkUuSggCs7nR7YJzH5t4M+0PbTME7hiBr6F+vO2UA/1oZQCvlnG7j0yl4KWp +PJOcKgXIAxsAldKNoERyekhaCFpRmKfK+ed4HwmkrgjjOPAGDBo3b4PorQxMMmPJ +jD9uRFrhTq+/wv3U1Mfpq8Kkwkx2j1J6iQtW48ZfEAfzkl/N4r+rVueOsYFxr8cl +KSxP7fC2PtcIAogotCJEYXZpZCBXb29kaG91c2UgPGR3bXcyQGtlcm5lbC5vcmc+ +iQI4BBMBAgAiAhsDAh4BAheABQJOz8S4BgsJCAcDAgYVCAIJCgsEFgIDAQAKCRBj +dizaZ+LzWU6qD/0S/fEXB0RY9l2SePrd/gOu4Qs8LsZhvlpjiYA3OawuSXmqVuvr +4m1Nk7K8znCZH/TMPqZ7d7ti8xYLdtAmmUwTFxElWVMGuT2F2J4//QIZpjmJcUsu +pJVsrI01DcGgRLq8kFfg4CCcPknk2YLLumemUcXuFGJqwrRjIIbZBwO0x2CrYAqS +pGNpDevSQFuVs1BtTUoyFV/DDz3TBggn/UfnV6nciQLD0vWL/QLxn2YFBtQEZbyT +pV3jC2+c9izos0Fce4Nf2pm6YKUQAt90jH9YhBlnk4iEH3gVILbTqA/imAwUlv52 +A6tBTpDjrLytGwCsQlGRAFLSbU13mFPFiL47lXaKBuLa+8zDeKN6YD6cRREImS7v ++pvu9eG19RgIr71dRQgeRbohp1bmFGq3T47bi2c6yiPnJlZ1ttLa2kfjgX+UU7lV +GEqQpXL6P0Pn5ZexHY0ue6MymotV7Mhlj7kfxCw2n36c9cpovLqR+Dzo67gLSB05 +djcz2H6PowRPM856GE9xTg56nq7B2iAUQ/zlxAf9i5ulf/GtOZVVxck99iwOhH9I +S8I3RlbocFFtezl8msJl4XC8Ab7K1cnoJjnq+n2f18enWfX5a4R/x4wEm9af0hpl +hrh9Qo0+nYUaPl4JFL3mieYqeCibxgvifMQ3apFDx50XVLP0fvw6yyGHn7QlRGF2 +aWQgV29vZGhvdXNlIDxkd213MkBpbmZyYWRlYWQub3JnPokCOwQTAQIAJQIbAwIe +AQIXgAIZAQUCTs/ErwYLCQgHAwIGFQgCCQoLBBYCAwEACgkQY3Ys2mfi81mOUA// +RCa57LMVU2VQLfznl+HnIMume5xLAKuvEFnO51G7psxt3d5M1p/ZYuciy0epBL49 +YOcOre1/aThu1E6qQmLNI8O9qMwT6yUzSZPK5NNP0duETlV+AY29bQVHSxLiJ3vZ +UuzJyNqGjU0/b8k1dOzi3P2qKyr94ciOna8luNyA1QF0AahS+x/oj87dJkkzqPrg +sGNRuabrJllJS1AJPNwH3pwSQoI+hdFq3MWPTEcQaYIIQVatO4cpzNsLpVOBB8Y4 +rc31R5pKmWtHWYQGKP4znVPitepC9vnaSj8v9SgA826TROJFCzpi9BPLXpxASzOQ +m/EFlRNLeJ9KYRV9pa3x/2xtV95Y+blRIgb8fCyI03L3vvBttqgE7bkL7esLhbus +UqrNixFecooFaJNW0OzuC9AF0apZHAkyPVytMMWAjT0af439e2EhwL9JO8l0OBqi +bG6/2hSoz1AybXHyNUP7iecRg9alXia3GOgD6Ahb5W/U8YlL7f352UDZMS0PMl8Y +8TdgXSOPLzJyrD7L1qvr6eeynKstp8JTJtcJp9DXbX4X7MhV9Hooqv5fLlt0dRW5 +FZ4/4R9adpi569Ggyxj7b15RE7qGHVLVli6SkA0k/s27aicA844/Z7xfxMXbdlxh +w43T+yd4yecK5YtD9n3VmNMO7wGNsJg9aqBS4Pp/xDa5Ag0ETo1xAQEQANqF/lhc +KNgCwHOcuClEUvjsfROGO/Enstf9sI9OjzVfxPe76R3zYAWvqo3Jz91reZUEnQdQ +yo5IZdOdPqdy+XF7nododfT1lZz3I41r4suFYy8eHxx9L1np8fkjVY/QOu0tGh87 +30r6AYTwZ+VoRMiioZUJwpsfByYGbJ8kzs5xhsE2rW8yPu+wXohXJgawYKYugDCO +5lfeA7+ZlLCIkZjhcdBDHjCJEuaHGX8e9wKKo05nLcVoPyz4oFmFeg54C2PmDS9C +V5Fygunp9YRcHP95JoALfLY/16CPsJaOxD/yTLh0Sr73pUP5ev0YTRwpUV8A8NIJ +sLZwcF8VssENeWeLMuCoFYSMknWM8Bwbmlx2ThiUvQ2HvdmSn0S4H2cuzlsuxayZ +w0EKwdeSCr8a4MrORbOZWGBDpil0gzQ8n7JybKzmYStmORT3jZEkgP3Gk7a0iwGh +ZBPnDSe8A56OOOhIUxUYhYpHAyk3Jej8xDwii9qFnCfUH/UJCBtpM/m6eYCDJiBD +lsq9/tBWgUHfS27ZJf1zwifHaZrS2kjzYZleYQDgKuCiTWrctBE07tNUSYTgjlzf +seRZbvP2jI7n0pksjqMJApwhmdO427e+Ip/UYLZ/LbpCB2dNkUjlU6V9FhtXO79X +sysAbnqLeVmMQnu5eEE826DExe3Gh6C9tePzABEBAAGJAh8EGAECAAkFAk6NcQEC +GwwACgkQY3Ys2mfi81kOrRAAx451eVoziks7qykXESWRQrtjBIOPahojcMoN+wy3 +ljVwzWmfoM8lYUTT4jccbsq42PWV1zENAnvktByWBLRIlSSfeQwAWRlFykHattdi +lSg3/11nKI8WPrz0SCqiiJBVW/SZvKucMwkiVDeiPQNQZR8BjcpcFVJqZ4Ochp0w +qw9q7BYi6ppPoGiiShVhqMQbuZ5Szh8IgbwrCL5jP3x0VJxBuS9hJQYLfiL2D7fk +qdDpnJjafuFhAdGLN+S5g4+T2IXxgsxp5/D5IMa7rYQf55Lkinlys3A0DON0RMdG +zd81XNbEe3j7wpgj6dEEHBJ5B6z6DHkhg9oEn27XoFvrKArzgYCmDF1gFPp307wZ +JPlVIUVVrptkNbYavsxQBbo7iMUut+VnHqqp5/zoAb/bLfqlmCul9ODgImzMtKdx +PG4tBLp8rFK5qgH4fhefdTSdYOSmYby0cIRZmQ+S0FwN5uncr6IEYf/TSjLbixNA +/OP+bfPhJPMGYwXIijv/0x3UfQ9qGBNhtUOq4M/b64QiHQGHizFvDlW50HGt7hWl +XEwt+6fZqUPTX0k3WdOwIuy+SdvoDbPIRv9sr9gCs+SALR4r+4bH61IJU0nMnB2a +3LHqUhKy5FaBqZqR6NkBAnVGxh7Li7FyFWggGiwSv3ocYBcLpAapQamaniB3jlk6 +HJE= +=q6KQ +-----END PGP PUBLIC KEY BLOCK----- diff --git a/debian/watch b/debian/watch new file mode 100644 index 0000000..8ede204 --- /dev/null +++ b/debian/watch @@ -0,0 +1,3 @@ +version=4 +opts=pgpsigurlmangle=s/$/.asc/ \ +ftp://ftp.infradead.org/pub/openconnect/openconnect-(.*)\.tar\.gz