#

# Rebuild switch:

#  --with integrationtests	enable integration tests (not fully maintained, may fail)

#

# This package uses systemd init from Fedora 16, but can use it for

# Fedora 15 if built using --with systemd

%if 0%{?fedora} > 15 || 0%{?rhel} > 6

%global _with_systemd --with-systemd

%endif

%global use_systemd %{!?_with_systemd:0}%{?_with_systemd:1}

# With systemd, the runtime directory is /run rather than /var/run

%if %{use_systemd}

%global rundir /run

%else

%global rundir %{_localstatedir}/run

%endif

# rundir (/var/run or /run) is on tmpfs from Fedora 15, RHEL 7

%if 0%{?fedora} > 14 || 0%{?rhel} > 6

%global rundir_tmpfs 1

%endif

# Use certs in %%{_sysconfdir}/pki/tls/certs if available (FC4, RHEL5 onwards)

%global use_pki %(if [ -d %{_sysconfdir}/pki/tls/certs ]; then echo 1; else echo 0; fi)

%if %{use_pki}

%global pkidir %{_sysconfdir}/pki/tls

%else

%global pkidir %{_datadir}/ssl

%endif

# For PCRE support we need pcre >= 7.0, not available in EL prior to EL-6

%if 0%{?rhel} > 5 || 0%{?fedora}

%global use_pcre 1

%endif

# For memcached support we need libmemcached >= 0.41, available from F-14 (EL-6 and below have libmemcached 0.31)

%if 0%{?rhel} > 6 || 0%{?fedora} > 13

%global have_libmemcached 1

%endif

#global prever rc3

%global rpmrel 2

Summary:		Flexible, stable and highly-configurable FTP server

Name:			proftpd

Version:		1.3.4a

Release:		%{?prever:0.}%{rpmrel}%{?prever:.%{prever}}%{?dist}

License:		GPLv2+

Group:			System Environment/Daemons

URL:			http://www.proftpd.org/

Source0:		ftp://ftp.proftpd.org/distrib/source/proftpd-%{version}%{?prever}.tar.bz2

Source1:		proftpd.conf

Source5:		proftpd-welcome.msg

Source9:		proftpd.sysconfig

Source10:		http://www.castaglia.org/proftpd/modules/proftpd-mod-vroot-0.9.2.tar.gz

Source11:		http://www.castaglia.org/proftpd/modules/proftpd-mod-geoip-0.3.tar.gz

# The integration tests require perl(Test::Unit) 0.14, which is the latest release on CPAN

# However, the version in Fedora is 0.25 from sourceforge, which is incompatible with the test suite,

# so we bundle version 0.14 here, purely for use during builds with the integration tests enabled

# (they are disabled by default); it is not included as part of the built package and should therefore

# not fall foul of the rules against library bundling

Source13:		http://search.cpan.org/CPAN/authors/id/C/CL/CLEMBURG/Test-Unit-0.14.tar.gz

Patch1:			proftpd-1.3.4rc3-mysql-password.patch

Patch2:			proftpd.conf-no-memcached.patch

Patch4:			proftpd-1.3.4rc1-mod_vroot-test.patch

Patch5:			proftpd-1.3.4-utf8.patch

BuildRoot:		%{_tmppath}/%{name}-%{version}-%{release}-root

Requires(preun):	coreutils, findutils

%if %{use_systemd}

BuildRequires:		systemd-units

Requires(pre):		systemd-sysv, /sbin/chkconfig

Requires(post):		systemd-units

Requires(preun):	systemd-units

Requires(postun):	systemd-units

%else

Requires(post):		/sbin/chkconfig

Requires(preun):	/sbin/service, /sbin/chkconfig

Requires(postun):	/sbin/service

%endif

# Need systemd-units for ownership of /etc/tmpfiles.d directory

%if 0%{?rundir_tmpfs:1}

Requires:		systemd-units

%endif

BuildRequires:		pam-devel, ncurses-devel, pkgconfig, gettext, zlib-devel

BuildRequires:		openssl-devel, libacl-devel, libcap-devel, /usr/include/tcpd.h

BuildRequires:		openldap-devel, mysql-devel, postgresql-devel, GeoIP-devel

%if 0%{?use_pcre:1}

BuildRequires:		pcre-devel >= 7.0

%endif

%if 0%{?have_libmemcached:1}

BuildRequires:		libmemcached-devel >= 0.41

%endif

# Test suite requirements

BuildRequires:		check-devel

%if 0%{?_with_integrationtests:1}

BuildRequires:		perl(Compress::Zlib)

BuildRequires:		perl(IO::Socket::SSL)

BuildRequires:		perl(Net::FTPSSL)

BuildRequires:		perl(Net::SSLeay)

BuildRequires:		perl(Net::Telnet)

BuildRequires:		perl(Test::Harness)

BuildRequires:		perl(Time::HiRes)

%endif

Provides:		ftpserver

%description

ProFTPD is an enhanced FTP server with a focus toward simplicity, security,

and ease of configuration. It features a very Apache-like configuration

syntax, and a highly customizable server infrastructure, including support for

multiple 'virtual' FTP servers, anonymous FTP, and permission-based directory

visibility.

This package defaults to the standalone behavior of ProFTPD, but all the

needed scripts to have it run by xinetd instead are included.

%package ldap

Summary:	Module to add LDAP support to the ProFTPD FTP server

Group:		System Environment/Daemons

Requires:	%{name} = %{version}-%{release}

%description ldap

Module to add LDAP support to the ProFTPD FTP server.

%package mysql

Summary:	Module to add MySQL support to the ProFTPD FTP server

Group:		System Environment/Daemons

Requires:	%{name} = %{version}-%{release}

%description mysql

Module to add MySQL support to the ProFTPD FTP server.

%package postgresql

Summary:	Module to add PostgreSQL support to the ProFTPD FTP server

Group:		System Environment/Daemons

Requires:	%{name} = %{version}-%{release}

%description postgresql

Module to add PostgreSQL support to the ProFTPD FTP server.

%prep

%setup -q -n %{name}-%{version}%{?prever} -a 10 -a 11 -a 13

# Copy mod_vroot source, documentation and tests into place

cp -p mod_vroot/mod_vroot.c contrib/

cp -p mod_vroot/mod_vroot.html doc/contrib/

cp -p mod_vroot/t/lib/ProFTPD/Tests/Modules/mod_vroot.pm \

	tests/t/lib/ProFTPD/Tests/Modules/

cp -p mod_vroot/t/modules/mod_vroot.t tests/t/modules/

# Copy mod_geoip source and documentation into place

cp -p mod_geoip/mod_geoip.c contrib/

cp -p mod_geoip/mod_geoip.html doc/contrib/

# Use my_make_scrambled_password rather than the deprecated

# make_scrambled_password, which isn't exported from Fedora's MySQL

# in F-15 onwards (#718327, upstream bug 3669)

%patch1 -p1 -b .mypasswd

# If we're running the full test suite, include the mod_vroot test

%patch4 -p1 -b .test_vroot

# Fix character encoding in docs

%patch5 -p1 -b .utf8

# Avoid documentation name conflicts

mv contrib/README contrib/README.contrib

# Set up directory names in config file

sed -e 's#@PKIDIR@#%{pkidir}#g' \

	%{SOURCE1} > proftpd.conf

# If we don't have libmemcached support, remove the mod_tls_memcache

# snippet from the config file

%if 0%{!?have_libmemcached:1}

%patch2 -p0

%endif

# Avoid docfile dependencies

chmod -x contrib/xferstats.holger-preiss

# PAM Configuration:

# Default PAM configuration file uses password-auth common config;

# revert to system-auth if password-auth is not available

if [ ! -f /etc/pam.d/password-auth ]; then

	sed -i -e s/password-auth/system-auth/ contrib/dist/rpm/proftpd.pam

fi

# The "include" syntax used in our PAM configuration file was introduced in

# PAM 0.78 and is therefore supported in FC-5 and EL-5 onwards; older

# distributions such as EL-4 (PAM 0.77) need to fall back to using the

# now-deprecated pam_stack module. Since the pam-devel package doesn't

# include a pkgconfig file from which we could check the version number, we

# instead check for the absence of the file /etc/pam.d/config-util, which is

# present in all PAM packages from 0.80 onwards and acts as a useful

# indicator of the need to fall back to pam_stack.

[ ! -f /etc/pam.d/config-util ] && sed -i -e \

	's/include[[:space:]]*system-auth/required'\ \ \ \ \ 'pam_stack.so service=system-auth/' \

	contrib/dist/rpm/proftpd.pam

# Remove bogus exec permissions from source files

chmod -c -x include/tpl.h lib/tpl.c

%build

# Modules to be built as DSO's (excluding mod_ifsession, always specified last)

SMOD1=mod_sql:mod_sql_passwd:mod_sql_mysql:mod_sql_postgres

SMOD2=mod_quotatab:mod_quotatab_file:mod_quotatab_ldap:mod_quotatab_radius:mod_quotatab_sql

SMOD3=mod_ldap:mod_ban:mod_wrap:mod_ctrls_admin:mod_facl:mod_load:mod_vroot

SMOD4=mod_radius:mod_ratio:mod_rewrite:mod_site_misc:mod_exec:mod_shaper:mod_geoip

SMOD5=mod_wrap2:mod_wrap2_file:mod_wrap2_sql:mod_copy:mod_deflate:mod_ifversion:mod_qos

SMOD6=mod_sftp:mod_sftp_pam:mod_sftp_sql:mod_tls_shmcache%{?have_libmemcached::mod_tls_memcache}

%configure \

			--libexecdir="%{_libexecdir}/proftpd" \

			--localstatedir="%{rundir}/proftpd" \

			--disable-strip \

			--enable-ctrls \

			--enable-dso \

			--enable-facl \

			--enable-ipv6 \

%{?have_libmemcached:	--enable-memcache} \

			--enable-nls \

			--enable-openssl \

%{?use_pcre:		--enable-pcre} \

			--enable-shadow \

			--enable-tests \

			--with-libraries="%{_libdir}/mysql" \

			--with-includes="%{_includedir}/mysql" \

			--with-modules=mod_readme:mod_auth_pam:mod_tls \

			--with-shared=${SMOD1}:${SMOD2}:${SMOD3}:${SMOD4}:${SMOD5}:${SMOD6}:mod_ifsession

make %{?_smp_mflags}

%install

rm -rf %{buildroot}

make install DESTDIR=%{buildroot} \

	rundir="%{rundir}/proftpd" \

	INSTALL_USER=`id -un` \

	INSTALL_GROUP=`id -gn`

install -D -p -m 640 proftpd.conf	%{buildroot}%{_sysconfdir}/proftpd.conf

install -D -p -m 644 contrib/dist/rpm/proftpd.pam \

					%{buildroot}%{_sysconfdir}/pam.d/proftpd

%if %{use_systemd}

install -D -p -m 644 contrib/dist/rpm/proftpd.service \

					%{buildroot}%{_unitdir}/proftpd.service

%else

install -D -p -m 755 contrib/dist/rpm/proftpd.init.d \

					%{buildroot}%{_sysconfdir}/rc.d/init.d/proftpd

%endif

install -D -p -m 644 contrib/dist/rpm/xinetd \

					%{buildroot}%{_sysconfdir}/xinetd.d/xproftpd

install -D -p -m 644 contrib/dist/rpm/proftpd.logrotate \

					%{buildroot}%{_sysconfdir}/logrotate.d/proftpd

install -D -p -m 644 %{SOURCE5}		%{buildroot}%{_localstatedir}/ftp/welcome.msg

install -D -p -m 644 %{SOURCE9}		%{buildroot}%{_sysconfdir}/sysconfig/proftpd

mkdir -p %{buildroot}%{_localstatedir}/{ftp/{pub,uploads},log/proftpd}

touch %{buildroot}%{_sysconfdir}/ftpusers

# Make sure %%{rundir}/proftpd exists at boot time for systems where it's on tmpfs (#656675)

%if 0%{?rundir_tmpfs:1}

install -d -m 755 %{buildroot}%{_sysconfdir}/tmpfiles.d

install -p -m 644 contrib/dist/rpm/proftpd-tmpfs.conf \

					%{buildroot}%{_sysconfdir}/tmpfiles.d/proftpd.conf

%endif

# Find translations

%find_lang proftpd

%check

# Integration tests not fully maintained - stick to API tests only by default

%if 0%{?_with_integrationtests:1}

# Make sure we can find everything we need

export PERL5LIB=$(pwd)/Test-Unit-0.14/lib

export PROFTPD_TEST_DIR=$(pwd)/tests

ln ftpdctl ftpwho tests/

make check

%else

# API tests should always be OK

if ! make -C tests api-tests; then

	# Diagnostics to report upstream

	cat tests/api-tests.log

	./proftpd -V

	# Fail the build

	false

fi

%endif

%clean

rm -rf %{buildroot}

%if %{use_systemd}

%pre

# SysV-to-systemd migration

if [ $1 -gt 1 -a ! -e %{_unitdir}/proftpd.service -a -e %{_sysconfdir}/rc.d/init.d/proftpd ]; then

	/usr/bin/systemd-sysv-convert --save proftpd &>/dev/null

	/sbin/chkconfig --del proftpd &>/dev/null || :

fi

%endif

%post

%if %{use_systemd}

/bin/systemctl daemon-reload &>/dev/null || :

%endif

if [ $1 -eq 1 ]; then

	# Initial installation

%if ! %{use_systemd}

	/sbin/chkconfig --add proftpd || :

%endif

	IFS=":"; cat /etc/passwd | \

	while { read username nu nu gid nu nu nu nu; }; do \

		if [ $gid -lt 100 -a "$username" != "ftp" ]; then

			echo $username >> %{_sysconfdir}/ftpusers

		fi

	done

fi

%preun

if [ $1 -eq 0 ]; then

	# Package removal, not upgrade

%if %{use_systemd}

	/bin/systemctl --no-reload disable proftpd.service &>/dev/null || :

	/bin/systemctl stop proftpd.service &>/dev/null || :

%else

	/sbin/service proftpd stop &>/dev/null || :

	/sbin/chkconfig --del proftpd || :

%endif

	find %{rundir}/proftpd -depth -mindepth 1 |

		xargs rm -rf &>/dev/null || :

fi

%postun

%if %{use_systemd}

/bin/systemctl daemon-reload &>/dev/null || :

%endif

if [ $1 -ge 1 ]; then

	# Package upgrade, not uninstall

%if %{use_systemd}

	/bin/systemctl try-restart proftpd.service &>/dev/null || :

%else

	/sbin/service proftpd condrestart &>/dev/null || :

%endif

else

	# Package removal, not upgrade

%if %{use_systemd}

	/bin/systemctl reload xinetd.service &>/dev/null || :

%else

	/sbin/service xinetd reload &>/dev/null || :

%endif

fi

%files -f proftpd.lang

%defattr(-,root,root,-)

%doc COPYING CREDITS ChangeLog NEWS README

%doc README.DSO README.modules README.IPv6 README.PAM

%doc README.capabilities README.classes README.controls README.facl

%doc contrib/README.contrib contrib/README.ratio

%doc doc/* sample-configurations/ contrib/xferstats.holger-preiss

%dir %{_localstatedir}/ftp/

%dir %{_localstatedir}/ftp/pub/

%dir %{rundir}/proftpd/

%config(noreplace) %{_localstatedir}/ftp/welcome.msg

%config(noreplace) %{_sysconfdir}/blacklist.dat

%config(noreplace) %{_sysconfdir}/dhparams.pem

%config(noreplace) %{_sysconfdir}/ftpusers

%config(noreplace) %{_sysconfdir}/logrotate.d/proftpd

%config(noreplace) %{_sysconfdir}/pam.d/proftpd

%config(noreplace) %{_sysconfdir}/proftpd.conf

%config(noreplace) %{_sysconfdir}/sysconfig/proftpd

%config(noreplace) %{_sysconfdir}/xinetd.d/xproftpd

%if %{use_systemd}

%{_unitdir}/proftpd.service

%else

%{_sysconfdir}/rc.d/init.d/proftpd

%endif

%if 0%{?rundir_tmpfs:1}

%{_sysconfdir}/tmpfiles.d/proftpd.conf

%endif

%{_bindir}/ftpasswd

%{_bindir}/ftpcount

%{_bindir}/ftpdctl

%{_bindir}/ftpmail

%{_bindir}/ftpquota

%{_bindir}/ftptop

%{_bindir}/ftpwho

%exclude %{_bindir}/prxs

%{_sbindir}/ftpscrub

%{_sbindir}/ftpshut

%{_sbindir}/in.proftpd

%{_sbindir}/proftpd

%{_mandir}/man1/ftpasswd.1*

%{_mandir}/man1/ftpcount.1*

%{_mandir}/man1/ftpmail.1*

%{_mandir}/man1/ftpquota.1*

%{_mandir}/man1/ftptop.1*

%{_mandir}/man1/ftpwho.1*

%{_mandir}/man5/xferlog.5*

%{_mandir}/man8/ftpdctl.8*

%{_mandir}/man8/ftpscrub.8*

%{_mandir}/man8/ftpshut.8*

%{_mandir}/man8/proftpd.8*

%exclude %{_includedir}/proftpd/

%exclude %{_libdir}/pkgconfig/

%dir %{_libexecdir}/proftpd/

%{_libexecdir}/proftpd/mod_ban.so

%{_libexecdir}/proftpd/mod_ctrls_admin.so

%{_libexecdir}/proftpd/mod_copy.so

%{_libexecdir}/proftpd/mod_deflate.so

%{_libexecdir}/proftpd/mod_exec.so

%{_libexecdir}/proftpd/mod_facl.so

%{_libexecdir}/proftpd/mod_geoip.so

%{_libexecdir}/proftpd/mod_ifsession.so

%{_libexecdir}/proftpd/mod_ifversion.so

%{_libexecdir}/proftpd/mod_load.so

%{_libexecdir}/proftpd/mod_qos.so

%{_libexecdir}/proftpd/mod_quotatab.so

%{_libexecdir}/proftpd/mod_quotatab_file.so

%{_libexecdir}/proftpd/mod_quotatab_radius.so

%{_libexecdir}/proftpd/mod_quotatab_sql.so

%{_libexecdir}/proftpd/mod_radius.so

%{_libexecdir}/proftpd/mod_ratio.so

%{_libexecdir}/proftpd/mod_rewrite.so

%{_libexecdir}/proftpd/mod_sftp.so

%{_libexecdir}/proftpd/mod_sftp_pam.so

%{_libexecdir}/proftpd/mod_sftp_sql.so

%{_libexecdir}/proftpd/mod_shaper.so

%{_libexecdir}/proftpd/mod_site_misc.so

%{_libexecdir}/proftpd/mod_sql.so

%{_libexecdir}/proftpd/mod_sql_passwd.so

%{?have_libmemcached:%{_libexecdir}/proftpd/mod_tls_memcache.so}

%{_libexecdir}/proftpd/mod_tls_shmcache.so

%{_libexecdir}/proftpd/mod_vroot.so

%{_libexecdir}/proftpd/mod_wrap.so

%{_libexecdir}/proftpd/mod_wrap2.so

%{_libexecdir}/proftpd/mod_wrap2_file.so

%{_libexecdir}/proftpd/mod_wrap2_sql.so

%exclude %{_libexecdir}/proftpd/*.a

%exclude %{_libexecdir}/proftpd/*.la

%attr(331, ftp, ftp) %dir %{_localstatedir}/ftp/uploads/

%attr(750, root, root) %dir %{_localstatedir}/log/proftpd/

%files ldap

%defattr(-,root,root,-)

%doc README.LDAP contrib/mod_quotatab_ldap.ldif contrib/mod_quotatab_ldap.schema

%{_libexecdir}/proftpd/mod_ldap.so

%{_libexecdir}/proftpd/mod_quotatab_ldap.so

%files mysql

%defattr(-,root,root,-)

%{_libexecdir}/proftpd/mod_sql_mysql.so

%files postgresql

%defattr(-,root,root,-)

%{_libexecdir}/proftpd/mod_sql_postgres.so

%changelog

* Tue Jan 10 2012 Paul Howarth <paul@city-fan.org> 1.3.4a-2

- Make mod_vroot a DSO, loaded by default (#772354)

- VRootAlias for /etc/security/pam_env.conf is redundant, so remove it

- Add BanMessage (#772354)

* Fri Nov 11 2011 Paul Howarth <paul@city-fan.org> 1.3.4a-1

- Update to 1.3.4a:

  - Fixed mod_load/mod_wrap2 build issues

- Drop now-redundant workaround for building mod_load and mod_wrap2

- Drop upstreamed patch for xinetd config typo

* Thu Nov 10 2011 Paul Howarth <paul@city-fan.org> 1.3.4-1

- Update to 1.3.4, addressing the following bugs since 1.3.4rc3:

  - ProFTPD with mod_sql_mysql dies of "Alarm clock" on FreeBSD (bug 3702)

  - mod_sql_mysql.so: undefined symbol: make_scrambled_password with MySQL 5.5

    on Fedora (bug 3669)

  - PQescapeStringConn() needs a better check (bug 3192)

  - Enable OpenSSL countermeasure against SSLv3/TLSv1 BEAST attacks (bug 3704);

    to disable this countermeasure, which may cause interoperability issues

    with some clients, use the NoEmptyFragments TLSOption

  - Support SFTPOption for ignoring requests to modify timestamps (bug 3706)

  - RPM build on CentOS 5.5 (64bit): "File not found by glob" (bug 3640)

  - Response pool use-after-free memory corruption error

    (bug 3711, #752812, ZDI-CAN-1420, CVE-2011-4130)

- Drop upstream patch for make_scrambled_password_323

- Use upstream SysV initscript rather than our own

- Use upstream systemd service file rather than our own

- Use upstream PAM configuration rather than our own

- Use upstream logrotate configuration rather than our own

- Use upstream tempfiles configuration rather than our own

- Use upstream xinetd configuration rather than our own

* Thu Oct  6 2011 Paul Howarth <paul@city-fan.org> 1.3.4-0.15.rc3

- Add upstream patch to not try make_scrambled_password_323 if the MySQL

  library doesn't export it (#718327, upstream bug 3669); this removes support

  for password hashes generated on MySQL prior to 4.1

* Thu Sep 29 2011 Paul Howarth <paul@city-fan.org> 1.3.4-0.14.rc3

- Update to 1.3.4rc3 (see NEWS and RELEASE_NOTES for full details)

  - The mod_ldap configuration directives have changed to a simplified version;

    please read the "Changes" section in README.LDAP for details

  - Support for using RADIUS for authentication SSH2 logins, and for supporting

    the NAS-IPv6-Address RADIUS attribute

  - Automatically disable sendfile support on AIX systems

  - <Limit WRITE> now prevents renaming/moving a file out of the limited

    directory

  - ExtendedLog entries now written for data transfers that time out

- Drop upstreamed patches

- Use new --disable-strip option to retain debugging symbols

- Use upstream LDAP quota table schema rather than our own copy

- Add patch for broken MySQL auth (#718327, upstream bug 3669)

- Remove spurious exec permissions on systemd unit file

* Tue Sep 27 2011 Paul Howarth <paul@city-fan.org> 1.3.4-0.13.rc2

- Restore back-compatibility with older releases and EPEL, broken by -11 update

- Use /run rather than /var/run if using systemd init

- Avoid the use of triggers in SysV-to-systemd migration

* Sat Sep 17 2011  Remi Collet <remi@fedoraproject.org> 1.3.4-0.12.rc2

- Rebuild against libmemcached.so.8

* Mon Sep 12 2011 Tom Callaway <spot@fedoraproject.org> 1.3.4-0.11.rc2

- Convert to systemd

* Fri Jun  3 2011 Paul Howarth <paul@city-fan.org> 1.3.4-0.10.rc2

- Rebuild for new libmemcached in Rawhide

* Tue May 17 2011 Paul Howarth <paul@city-fan.org> 1.3.4-0.9.rc2

- Add a number of fixes for bugs reported upstream:

  - Avoid spinning proftpd process if read(2) returns EAGAIN (bug 3639)

  - SITE CPFR/CPTO does not update quota tally (bug 3641)

  - Segfault in mod_sql_mysql if "SQLAuthenticate groupsetfast" used (bug 3642)

  - Disable signal handling for exiting session processes (bug 3644)

  - Ensure that SQLNamedConnectInfos with PERSESSION connection policies are

    opened before chroot (bug 3645)

  - MaxStoreFileSize can be bypassed using REST/APPE (bug 3649)

  - Fix TCPAccessSyslogLevel directive (bug 3652)

  - Segfault with "DefaultServer off" and no matching server for incoming IP

    address (bug 3653)

* Fri Apr  8 2011 Paul Howarth <paul@city-fan.org> 1.3.4-0.8.rc2

- Update mod_geoip to 0.3 (update for new regexp API)

- Drop patch for mod_geoip API fix

* Mon Apr  4 2011 Paul Howarth <paul@city-fan.org> 1.3.4-0.7.rc2

- Update to 1.3.4rc2 (see NEWS and RELEASE_NOTES for full details)

  - Display messages work properly again

  - Fixes plaintext command injection vulnerability in FTPS implementation

    (bug 3624)

  - Fixes CVE-2011-1137 (badly formed SSH messages cause DoS - bug 3586)

  - Performance improvements, especially during server startup/restarts

  - New modules mod_memcache and mod_tls_memcache for using memcached servers

    for caching information among different proftpd servers and/or across

    sessions

  - Utilities installed by default: ftpasswd, ftpmail, ftpquota

  - New configuration directives:

    - MaxCommandRate

    - SQLNamedConnectInfo

    - TraceOptions

  - Changed configuration directives:

    - BanOnEvent

    - ExtendedLog

    - LogFormat

    - PathAllowFilter

    - PathDenyFilter

    - SFTPOptions

    - SFTPPAMOptions

    - SQLNamedQuery

    - TLSSessionCache

    - Trace

  - New documentation for ConnectionACLs and utilities (ftpasswd etc.)

- Use the pcre regexp implementation (where possible) rather than the glibc one,

  which isn't safe with untrusted regexps

  (http://bugs.proftpd.org/3595, CVE-2010-4051, CVE-2010-4052, #673040)

- We need libmemcached 0.41 or later for memcached support

- We need pcre 7.0 or later for pcre regexp support

- Nobody else likes macros for commands

* Tue Mar 22 2011 Paul Howarth <paul@city-fan.org> 1.3.4-0.4.rc1

- Rebuilt for new MySQL client library in Rawhide

* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.4-0.3.rc1.1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

* Tue Jan 11 2011 Paul Howarth <paul@city-fan.org> 1.3.4-0.3.rc1

- Update mod_vroot to 0.9.2

- Get more of the integration tests working

* Wed Jan  5 2011 Paul Howarth <paul@city-fan.org> 1.3.4-0.2.rc1

- Update mod_vroot to 0.9.1

- Add upstream patches making unit tests work on systems where 127.0.0.1

  maps to localhost.localdomain rather than just localhost

* Fri Dec 24 2010 Paul Howarth <paul@city-fan.org> 1.3.4-0.1.rc1

- Update to 1.3.4rc1 (see RELEASE_NOTES for full details)

  - Added Japanese translation

  - Many mod_sftp bugfixes

  - Fixed SSL_shutdown() errors caused by OpenSSL 0.9.8m and later

  - Added support for SMTP authentication in ftpmail script

  - Updated fnmatch implementation, using glibc-2.9 version

  - New modules: mod_copy, mod_deflate, mod_ifversion, mod_qos

  - New configuration directives:

    - Protocols

    - ScoreboardMutex

    - SFTPClientAlive

    - WrapOptions

  - Changed configuration directives:

    - BanOnEvent

    - ListOptions

    - LogFormat

    - SFTPOptions

    - TLSOptions

    - UseSendfile

  - Deprecated configuration directives:

    - DisplayGoAway (support for this directive has been removed)

- Add %%check section, running the API tests by default

- BR: check-devel, needed for the API test suite

- Add upstream patch (http://bugs.proftpd.org/3568), modified slightly, to fix

  the API tests

- Optionally run the perl-based integration test suite if the build option

  --with integrationtests is supplied; this is off by default as it is not

  fully maintained and is expected to fail in parts

  (see http://bugs.proftpd.org/3568#c5)

- Bundle perl(Test::Unit) 0.14, needed to run the integration test suite

  (version in Fedora is incompatible later version not from CPAN)

- BR: perl modules Compress::Zlib, IO::Socket::SSL, Net::FTPSSL, Net::SSLeay,

  Net::Telnet, Test::Harness and Time::HiRes if building --with integrationtests

- New DSO modules: mod_copy, mod_deflate, mod_ifversion, mod_qos

- QoS support can be enabled in /etc/sysconfig/proftpd

* Mon Dec 20 2010 Paul Howarth <paul@city-fan.org> 1.3.3d-1

- Update to 1.3.3d

  - Fixed sql_prepare_where() buffer overflow (bug 3536, CVE-2010-4652)

  - Fixed CPU spike when handling .ftpaccess files

  - Fixed handling of SFTP uploads when compression is used

* Fri Dec 10 2010 Paul Howarth <paul@city-fan.org> 1.3.3c-3

- Update mod_vroot to 0.9 (improvements to alias handling)

- Note that the previous default configuration is broken by this change; see

  the new VRootAlias line in proftpd.conf

- Add Default-Stop LSB keyword in initscript (for runlevels 0, 1, and 6)

* Wed Dec  1 2010 Paul Howarth <paul@city-fan.org> 1.3.3c-2

- Add /etc/tmpfiles.d/proftpd.conf for builds on Fedora 15 onwards to

  support running with /var/run on tmpfs (#656675)

* Mon Nov  1 2010 Paul Howarth <paul@city-fan.org> 1.3.3c-1

- Update to 1.3.3c (#647965)

  - Fixed Telnet IAC stack overflow vulnerability (CVE-2010-4221)

  - Fixed directory traversal bug in mod_site_misc (CVE-2010-3867)

  - Fixed SQLite authentications using "SQLAuthType Backend"

- New DSO module: mod_geoip

* Fri Sep 10 2010 Paul Howarth <paul@city-fan.org> 1.3.3b-1

- Update to 1.3.3b

  - Fixed SFTP directory listing bug

  - Avoid corrupting utmpx databases on FreeBSD

  - Avoid null pointer dereferences during data transfers

  - Fixed "AuthAliasOnly on" anonymous login

* Fri Jul  2 2010 Paul Howarth <paul@city-fan.org> 1.3.3a-1

- Update to 1.3.3a

  - Added Japanese translation

  - Many mod_sftp bugfixes

  - Fixed SSL_shutdown() errors caused by OpenSSL 0.9.8m and later

  - Fixed handling of utmp/utmpx format changes on FreeBSD

* Thu Feb 25 2010 Paul Howarth <paul@city-fan.org> 1.3.3-1

- Update to 1.3.3 (see NEWS for list of fixed bugs)

- Update PID file location in initscript

- Drop upstreamed patches

- Upstream distribution now includes mod_exec, so drop unbundled source

- New DSO modules:

  - mod_sftp

  - mod_sftp_pam

  - mod_sftp_sql

  - mod_shaper

  - mod_sql_passwd

  - mod_tls_shmcache

- Configure script no longer appends "/proftpd" to --localstatedir option

- New utility ftpscrub for scrubbing the scoreboard file

- Include public key blacklist and Diffie-Hellman parameter files for mod_sftp

  in %%{_sysconfdir}

- Remove IdentLookups from config file - disabled by default now

* Mon Feb 15 2010 Paul Howarth <paul@city-fan.org> 1.3.2d-1

- Update to 1.3.2d, addressing the following issues: 

  - mod_tls doesn't compile with pre-0.9.7 openssl (bug 3358) 

  - Lack of PID protection in ScoreboardFile (bug 3370) 

  - Crash when retrying a failed login with mod_radius being used (bug 3372) 

  - RADIUS authentication broken on 64-bit platforms (bug 3381) 

  - SIGHUP eventually causes certain DSO modules to segfault (bug 3387) 

* Thu Dec 10 2009 Paul Howarth <paul@city-fan.org> 1.3.2c-1

- Update to 1.3.2c, addressing the following issues:

  - SSL/TLS renegotiation vulnerability (CVE-2009-3555, bug 3324)

  - Failed database transaction can cause mod_quotatab to loop (bug 3228)

  - Segfault in mod_wrap (bug 3332)

  - <Directory> sections can have <Limit> problems (bug 3337)

  - mod_wrap2 segfaults when a valid user retries the USER command (bug 3341)

  - mod_auth_file handles 'getgroups' request incorrectly (bug 3347)

  - Segfault caused by scrubbing zero-length portion of memory (bug 3350)

- Drop upstreamed segfault patch

* Thu Dec 10 2009 Paul Howarth <paul@city-fan.org> 1.3.2b-3

- Add patch for upstream bug 3350 - segfault on auth failures

* Wed Dec  9 2009 Paul Howarth <paul@city-fan.org> 1.3.2b-2

- Reduce the mod_facts patch to the single commit addressing the issue with

  directory names with glob characters (#521634), avoiding introducing a

  further problem with <Limit> (#544002)

* Wed Oct 21 2009 Paul Howarth <paul@city-fan.org> 1.3.2b-1

- Update to 1.3.2b

  - Fixed regression causing command-line define options not to work (bug 3221)

  - Fixed SSL/TLS cert subjectAltName verification (bug 3275, CVE-2009-3639)

  - Use correct cached user values with "SQLNegativeCache on" (bug 3282)

  - Fix slower transfers of multiple small files (bug 3284)

  - Support MaxTransfersPerHost, MaxTransfersPerUser properly (bug 3287)

  - Handle symlinks to directories with trailing slashes properly (bug 3297)

- Drop upstreamed defines patch (bug 3221)

* Thu Sep 17 2009 Paul Howarth <paul@city-fan.org> 1.3.2a-7