#

# Rebuild switch:

#  --with integrationtests	enable integration tests (not fully maintained, likely to fail)

#

# This package uses systemd init from Fedora 16, but can use it for

# Fedora 15 if built using --with systemd

%if 0%{?fedora} > 15 || 0%{?rhel} > 6

%global _with_systemd --with-systemd

%endif

%global use_systemd %{!?_with_systemd:0}%{?_with_systemd:1}

# With systemd, the runtime directory is /run rather than /var/run

%if %{use_systemd}

%global rundir /run

%else

%global rundir %{_localstatedir}/run

%endif

# rundir (/var/run or /run) is on tmpfs from Fedora 15, RHEL 7

%if 0%{?fedora} > 14 || 0%{?rhel} > 6

%global rundir_tmpfs 1

%endif

# Support systemd presets from Fedora 18, RHEL 7

%if 0%{?fedora} > 17 || 0%{?rhel} > 6

%global preset_support 1

%endif

# For memcached support we need libmemcached >= 0.41, available from F-14 (EL-6 and below have libmemcached 0.31)

%if 0%{?rhel} > 6 || 0%{?fedora} > 13

%global have_libmemcached 1

%endif

# Do a hardened build where possible

%global _hardened_build 1

#global prever rc3

%global rpmrel 4

%global mod_vroot_version 0.9.5

Summary:		Flexible, stable and highly-configurable FTP server

Name:			proftpd

Version:		1.3.6

Release:		%{?prever:0.}%{rpmrel}%{?prever:.%{prever}}%{?dist}.1

License:		GPLv2+

URL:			http://www.proftpd.org/

Source0:		ftp://ftp.proftpd.org/distrib/source/proftpd-%{version}%{?prever}.tar.gz

Source1:		proftpd.conf

Source5:		proftpd-welcome.msg

Source9:		proftpd.sysconfig

Source10:		http://github.com/Castaglia/proftpd-mod_vroot/archive/v%{mod_vroot_version}.tar.gz

Patch1:			proftpd-1.3.6-shellbang.patch

Patch2:			proftpd.conf-no-memcached.patch

Patch3:			proftpd-1.3.4rc1-mod_vroot-test.patch

Patch100:		https://github.com/proftpd/proftpd/commit/459693c7.patch

Patch101:		https://github.com/proftpd/proftpd/commit/389cc579.patch

Patch102:		https://github.com/proftpd/proftpd/commit/1825a2b8.patch

Patch103:		https://github.com/proftpd/proftpd/commit/73887e02.patch

Patch104:		https://github.com/proftpd/proftpd/commit/8a186e2d.patch

Patch105:		https://github.com/proftpd/proftpd/commit/c3e5d75f.patch

Patch106:		proftpd-1.3.6-add-enable-tests-nonetwork-option.patch

Patch107:		https://github.com/proftpd/proftpd/commit/adfdc01d.patch

Patch108:		https://github.com/proftpd/proftpd/commit/6cc96b5f.patch

Patch109:		https://github.com/proftpd/proftpd/commit/aa85f127.patch

Patch110:		https://github.com/proftpd/proftpd/commit/7907aa65.patch

Patch111:		https://github.com/proftpd/proftpd/commit/08ba2f63.patch

Patch112:		https://github.com/proftpd/proftpd/commit/757b9633.patch

Patch113:		https://github.com/proftpd/proftpd/commit/41ecb7dc.patch

BuildRequires:		coreutils

BuildRequires:		gcc

BuildRequires:		GeoIP-devel

BuildRequires:		gettext

BuildRequires:		libacl-devel

BuildRequires:		libcap-devel

%if 0%{?have_libmemcached:1}

BuildRequires:		libmemcached-devel >= 0.41

%endif

BuildRequires:		mysql-devel

BuildRequires:		ncurses-devel

BuildRequires:		openldap-devel

BuildRequires:		openssl-devel

BuildRequires:		pam-devel

BuildRequires:		pcre-devel >= 7.0

BuildRequires:		perl-generators

BuildRequires:		perl%{?fedora:-interpreter}

BuildRequires:		pkgconfig

BuildRequires:		postgresql-devel

BuildRequires:		tar

BuildRequires:		tcp_wrappers-devel

BuildRequires:		zlib-devel

# Test suite requirements

BuildRequires:		check-devel

%if 0%{?_with_integrationtests:1}

BuildRequires:		perl(Compress::Zlib)

BuildRequires:		perl(Digest::MD5)

BuildRequires:		perl(HTTP::Request)

BuildRequires:		perl(IO::Socket::SSL)

BuildRequires:		perl(LWP::UserAgent)

BuildRequires:		perl(Net::FTPSSL)

BuildRequires:		perl(Net::SSLeay)

BuildRequires:		perl(Net::Telnet)

BuildRequires:		perl(Sys::HostAddr)

BuildRequires:		perl(Test::Harness)

BuildRequires:		perl(Test::Unit) >= 0.25

BuildRequires:		perl(Time::HiRes)

%endif

# Need systemd-units for ownership of /usr/lib/tmpfiles.d directory

%if 0%{?rundir_tmpfs:1}

Requires:		systemd-units

%endif

Requires(preun):	coreutils, findutils

%if %{use_systemd}

BuildRequires:		systemd-units

Requires(post):		systemd-units

Requires(preun):	systemd-units

Requires(postun):	systemd-units

%else

Requires(post):		/sbin/chkconfig

Requires(preun):	/sbin/service, /sbin/chkconfig

Requires(postun):	/sbin/service

%endif

Provides:		ftpserver

%description

ProFTPD is an enhanced FTP server with a focus toward simplicity, security,

and ease of configuration. It features a very Apache-like configuration

syntax, and a highly customizable server infrastructure, including support for

multiple 'virtual' FTP servers, anonymous FTP, and permission-based directory

visibility.

%if %{use_systemd}

This package defaults to the standalone behavior of ProFTPD, but all the

needed scripts to have it run by systemd instead are included.

%else

This package defaults to the standalone behavior of ProFTPD, but all the

needed scripts to have it run by xinetd instead are included.

%endif

%package devel

Summary:	ProFTPD - Tools and header files for developers

Requires:	%{name} = %{version}-%{release}

# devel package requires the same devel packages as were build-required

# for the main package

Requires:	gcc, libtool

Requires:	GeoIP-devel

Requires:	libacl-devel

Requires:	libcap-devel

Requires:	mysql-devel

Requires:	openldap-devel

Requires:	openssl-devel

Requires:	pam-devel

Requires:	pcre-devel

Requires:	postgresql-devel

Requires:	pkgconfig

Requires:	ncurses-devel

Requires:	tcp_wrappers-devel

Requires:	zlib-devel

%if 0%{?have_libmemcached:1}

Requires:	libmemcached-devel >= 0.41

%endif

%description devel

This package is required to build additional modules for ProFTPD.

%package ldap

Summary:	Module to add LDAP support to the ProFTPD FTP server

Requires:	%{name} = %{version}-%{release}

%description ldap

Module to add LDAP support to the ProFTPD FTP server.

%package mysql

Summary:	Module to add MySQL support to the ProFTPD FTP server

Requires:	%{name} = %{version}-%{release}

%description mysql

Module to add MySQL support to the ProFTPD FTP server.

%package postgresql

Summary:	Module to add PostgreSQL support to the ProFTPD FTP server

Requires:	%{name} = %{version}-%{release}

%description postgresql

Module to add PostgreSQL support to the ProFTPD FTP server.

%package utils

Summary:	ProFTPD - Additional utilities

Requires:	%{name} = %{version}-%{release}

Requires:	perl-interpreter

# ftpasswd --use-cracklib requires Crypt::Cracklib

BuildRequires:	perl(Crypt::Cracklib)

Requires:	perl(Crypt::Cracklib)

%description utils

This package contains additional utilities for monitoring and configuring the

ProFTPD server:

* ftpasswd: generate passwd(5) files for use with AuthUserFile

* ftpcount: show the current number of connections per server/virtualhost

* ftpmail: monitor transfer log and send email when files uploaded

* ftpquota: manipulate quota tables

* ftptop: show the current status of FTP sessions

* ftpwho: show the current process information for each FTP session

%prep

%setup -q -n %{name}-%{version}%{?prever}

# Extract mod_vroot source into contrib/

# Directory must be named mod_vroot for configure script to find it

cd contrib

tar xfz %{SOURCE10}

mv proftpd-mod_vroot-%{mod_vroot_version} mod_vroot

cd -

# Default config file

cp -p %{SOURCE1} proftpd.conf

# Avoid documentation name conflicts

mv contrib/README contrib/README.contrib

# Change shellbangs /usr/bin/env perl ⇒ /usr/bin/perl

%patch1

# If we don't have libmemcached support, remove the mod_tls_memcache

# snippet from the config file

%if 0%{!?have_libmemcached:1}

%patch2

%endif

# If we're running the full test suite, include the mod_vroot test

%patch3 -p1 -b .test_vroot

# Check for symlinks in home directory path as logging-in user

# http://bugs.proftpd.org/show_bug.cgi?id=4306

# https://bugzilla.redhat.com/show_bug.cgi?id=1443507

# https://github.com/proftpd/proftpd/pull/496

%patch100 -p1

# Fix API tests to work in Fedora/RHEL environments

# https://github.com/proftpd/proftpd/issues/483

# https://github.com/proftpd/proftpd/pull/510

# https://github.com/proftpd/proftpd/pull/514

%patch101 -p1

%patch102 -p1

%patch103 -p1

%patch104 -p1

# Fix similars functionality and unit test

# https://github.com/proftpd/proftpd/pull/513

%patch105 -p1

# Add functionality to disable external network tests

# https://github.com/proftpd/proftpd/pull/497

%patch106 -p1

# Systemd requires that executeable pathnames are absolute

# https://github.com/proftpd/proftpd/pull/502

%patch107 -p1

# Systemd upstream recommends Type = simple for services if possible

# https://github.com/proftpd/proftpd/pull/506

%patch108 -p1

# Don't mess with system profiles in TLSCipherSuite

# https://github.com/proftpd/proftpd/pull/499

%patch109 -p1

%patch110 -p1

# Remove redundant bind() to controls socket

# https://github.com/proftpd/proftpd/issues/501

%patch111 -p1

# mod_sftp failed to check shadow password information when publickey

# authentication used

# http://bugs.proftpd.org/show_bug.cgi?id=4308

%patch112 -p1

# Use of "AllowEmptyPasswords off" broke SFTP/SCP logins

# http://bugs.proftpd.org/show_bug.cgi?id=4309

%patch113 -p1

# OpenSSL Cipher Profiles introduced in Fedora 21

# Elsewhere, we use the default of DEFAULT:!ADH:!EXPORT:!DES

%if 0%{?fedora} < 21 && 0%{?rhel} < 8

sed -i -e '/^[[:space:]]*TLSCipherSuite[[:space:]]*PROFILE=SYSTEM$/d' proftpd.conf

%endif

# Tweak logrotate script for systemd compatibility (#802178)

%if %{use_systemd}

sed -i -e '/killall/s/test.*/systemctl reload proftpd.service/' \

	contrib/dist/rpm/proftpd.logrotate

%endif

# Avoid docfile dependencies

chmod -x contrib/xferstats.holger-preiss

# Remove bogus exec permissions from source files

chmod -c -x include/hanson-tpl.h lib/hanson-tpl.c

%build

# Modules to be built as DSO's (excluding mod_ifsession, always specified last)

SMOD1=mod_sql:mod_sql_passwd:mod_sql_mysql:mod_sql_postgres

SMOD2=mod_quotatab:mod_quotatab_file:mod_quotatab_ldap:mod_quotatab_radius:mod_quotatab_sql

SMOD3=mod_ldap:mod_ban:mod_wrap:mod_ctrls_admin:mod_facl:mod_load:mod_vroot

SMOD4=mod_radius:mod_ratio:mod_rewrite:mod_site_misc:mod_exec:mod_shaper:mod_geoip

SMOD5=mod_wrap2:mod_wrap2_file:mod_wrap2_sql:mod_copy:mod_deflate:mod_ifversion:mod_qos

SMOD6=mod_sftp:mod_sftp_pam:mod_sftp_sql:mod_tls_shmcache%{?have_libmemcached::mod_tls_memcache}

%configure \

			--libexecdir="%{_libexecdir}/proftpd" \

			--localstatedir="%{rundir}/proftpd" \

			--disable-strip \

			--enable-ctrls \

			--enable-dso \

			--enable-facl \

			--enable-ipv6 \

%{?have_libmemcached:	--enable-memcache} \

			--enable-nls \

			--enable-openssl \

			--disable-pcre \

			--disable-redis \

			--enable-shadow \

			--enable-tests=nonetwork \

			--with-libraries="%{_libdir}/mysql" \

			--with-includes="%{_includedir}/mysql" \

			--with-modules=mod_readme:mod_auth_pam:mod_tls \

			--with-shared=${SMOD1}:${SMOD2}:${SMOD3}:${SMOD4}:${SMOD5}:${SMOD6}:mod_ifsession

make %{?_smp_mflags}

%install

make install DESTDIR=%{buildroot} \

	rundir="%{rundir}/proftpd" \

	INSTALL_USER=`id -un` \

	INSTALL_GROUP=`id -gn`

install -D -p -m 640 proftpd.conf	%{buildroot}%{_sysconfdir}/proftpd.conf

install -D -p -m 644 contrib/dist/rpm/proftpd.pam \

					%{buildroot}%{_sysconfdir}/pam.d/proftpd

%if %{use_systemd}

install -D -p -m 644 contrib/dist/rpm/proftpd.service \

					%{buildroot}%{_unitdir}/proftpd.service

install -D -p -m 644 contrib/dist/systemd/proftpd.socket \

					%{buildroot}%{_unitdir}/proftpd.socket

install -D -p -m 644 contrib/dist/systemd/proftpd@.service \

					%{buildroot}%{_unitdir}/proftpd@.service

%else

install -D -p -m 755 contrib/dist/rpm/proftpd.init.d \

					%{buildroot}%{_sysconfdir}/rc.d/init.d/proftpd

install -D -p -m 644 contrib/dist/rpm/xinetd \

					%{buildroot}%{_sysconfdir}/xinetd.d/xproftpd

%endif

install -D -p -m 644 contrib/dist/rpm/proftpd.logrotate \

					%{buildroot}%{_sysconfdir}/logrotate.d/proftpd

install -D -p -m 644 %{SOURCE5}		%{buildroot}%{_localstatedir}/ftp/welcome.msg

install -D -p -m 644 %{SOURCE9}		%{buildroot}%{_sysconfdir}/sysconfig/proftpd

mkdir -p %{buildroot}%{_localstatedir}/{ftp/{pub,uploads},log/proftpd}

touch %{buildroot}%{_sysconfdir}/ftpusers

# Make sure %%{rundir}/proftpd exists at boot time for systems where it's on tmpfs (#656675)

%if 0%{?rundir_tmpfs:1}

install -d -m 755 %{buildroot}%{_prefix}/lib/tmpfiles.d

install -p -m 644 contrib/dist/rpm/proftpd-tmpfs.conf \

					%{buildroot}%{_prefix}/lib/tmpfiles.d/proftpd.conf

%endif

# Find translations

%find_lang proftpd

%check

# Integration tests not fully maintained - stick to API tests only by default

%if 0%{?_with_integrationtests:1}

ln ftpdctl tests/

make check

%else

# API tests should always be OK

if ! make -C tests api-tests; then

	# Diagnostics to report upstream

	cat tests/api-tests.log

	./proftpd -V

	# Fail the build

	false

fi

%endif

%post

%if %{use_systemd}

/bin/systemctl daemon-reload &>/dev/null || :

%endif

if [ $1 -eq 1 ]; then

	# Initial installation

%if ! %{use_systemd}

	/sbin/chkconfig --add proftpd || :

%endif

%if 0%{?preset_support:1}

	/bin/systemctl preset proftpd.service &>/dev/null || :

%endif

	IFS=":"; cat /etc/passwd | \

	while { read username nu nu gid nu nu nu nu; }; do \

		if [ $gid -lt 100 -a "$username" != "ftp" ]; then

			echo $username >> %{_sysconfdir}/ftpusers

		fi

	done

fi

%preun

if [ $1 -eq 0 ]; then

	# Package removal, not upgrade

%if %{use_systemd}

	/bin/systemctl --no-reload disable proftpd.service &>/dev/null || :

	/bin/systemctl stop proftpd.service &>/dev/null || :

%else

	/sbin/service proftpd stop &>/dev/null || :

	/sbin/chkconfig --del proftpd || :

%endif

	find %{rundir}/proftpd -depth -mindepth 1 |

		xargs rm -rf &>/dev/null || :

fi

%postun

%if %{use_systemd}

/bin/systemctl daemon-reload &>/dev/null || :

%endif

if [ $1 -ge 1 ]; then

	# Package upgrade, not uninstall

%if %{use_systemd}

	/bin/systemctl try-restart proftpd.service &>/dev/null || :

%else

	/sbin/service proftpd condrestart &>/dev/null || :

else

	# Package removal, not upgrade

	/sbin/service xinetd reload &>/dev/null || :

%endif

fi

%files -f proftpd.lang

%if 0%{?_licensedir:1}

%license COPYING

%else

%doc COPYING

%endif

%doc CREDITS ChangeLog NEWS README.md

%doc README.DSO README.modules README.IPv6 README.PAM

%doc README.capabilities README.classes README.controls README.facl

%doc contrib/README.contrib contrib/README.ratio

%doc doc/* sample-configurations/

%dir %{_localstatedir}/ftp/

%dir %{_localstatedir}/ftp/pub/

%dir %{rundir}/proftpd/

%config(noreplace) %{_localstatedir}/ftp/welcome.msg

%config(noreplace) %{_sysconfdir}/blacklist.dat

%config(noreplace) %{_sysconfdir}/dhparams.pem

%config(noreplace) %{_sysconfdir}/ftpusers

%config(noreplace) %{_sysconfdir}/logrotate.d/proftpd

%config(noreplace) %{_sysconfdir}/pam.d/proftpd

%config(noreplace) %{_sysconfdir}/proftpd.conf

%config(noreplace) %{_sysconfdir}/sysconfig/proftpd

%if %{use_systemd}

%{_unitdir}/proftpd.service

%{_unitdir}/proftpd.socket

%{_unitdir}/proftpd@.service

%else

%config(noreplace) %{_sysconfdir}/xinetd.d/xproftpd

%{_sysconfdir}/rc.d/init.d/proftpd

%endif

%if 0%{?rundir_tmpfs:1}

%{_prefix}/lib/tmpfiles.d/proftpd.conf

%endif

%{_bindir}/ftpdctl

%{_sbindir}/ftpscrub

%{_sbindir}/ftpshut

%{_sbindir}/in.proftpd

%{_sbindir}/proftpd

%{_mandir}/man5/proftpd.conf.5*

%{_mandir}/man5/xferlog.5*

%{_mandir}/man8/ftpdctl.8*

%{_mandir}/man8/ftpscrub.8*

%{_mandir}/man8/ftpshut.8*

%{_mandir}/man8/proftpd.8*

%dir %{_libexecdir}/proftpd/

%{_libexecdir}/proftpd/mod_ban.so

%{_libexecdir}/proftpd/mod_ctrls_admin.so

%{_libexecdir}/proftpd/mod_copy.so

%{_libexecdir}/proftpd/mod_deflate.so

%{_libexecdir}/proftpd/mod_exec.so

%{_libexecdir}/proftpd/mod_facl.so

%{_libexecdir}/proftpd/mod_geoip.so

%{_libexecdir}/proftpd/mod_ifsession.so

%{_libexecdir}/proftpd/mod_ifversion.so

%{_libexecdir}/proftpd/mod_load.so

%{_libexecdir}/proftpd/mod_qos.so

%{_libexecdir}/proftpd/mod_quotatab.so

%{_libexecdir}/proftpd/mod_quotatab_file.so

%{_libexecdir}/proftpd/mod_quotatab_radius.so

%{_libexecdir}/proftpd/mod_quotatab_sql.so

%{_libexecdir}/proftpd/mod_radius.so

%{_libexecdir}/proftpd/mod_ratio.so

%{_libexecdir}/proftpd/mod_rewrite.so

%{_libexecdir}/proftpd/mod_sftp.so

%{_libexecdir}/proftpd/mod_sftp_pam.so

%{_libexecdir}/proftpd/mod_sftp_sql.so

%{_libexecdir}/proftpd/mod_shaper.so

%{_libexecdir}/proftpd/mod_site_misc.so

%{_libexecdir}/proftpd/mod_sql.so

%{_libexecdir}/proftpd/mod_sql_passwd.so

%{?have_libmemcached:%{_libexecdir}/proftpd/mod_tls_memcache.so}

%{_libexecdir}/proftpd/mod_tls_shmcache.so

%{_libexecdir}/proftpd/mod_vroot.so

%{_libexecdir}/proftpd/mod_wrap.so

%{_libexecdir}/proftpd/mod_wrap2.so

%{_libexecdir}/proftpd/mod_wrap2_file.so

%{_libexecdir}/proftpd/mod_wrap2_sql.so

%exclude %{_libexecdir}/proftpd/*.a

%exclude %{_libexecdir}/proftpd/*.la

%attr(331, ftp, ftp) %dir %{_localstatedir}/ftp/uploads/

%attr(750, root, root) %dir %{_localstatedir}/log/proftpd/

%files devel

%{_bindir}/prxs

%{_includedir}/proftpd/

%{_libdir}/pkgconfig/proftpd.pc

%files ldap

%doc README.LDAP contrib/mod_quotatab_ldap.ldif contrib/mod_quotatab_ldap.schema

%{_libexecdir}/proftpd/mod_ldap.so

%{_libexecdir}/proftpd/mod_quotatab_ldap.so

%files mysql

%{_libexecdir}/proftpd/mod_sql_mysql.so

%files postgresql

%{_libexecdir}/proftpd/mod_sql_postgres.so

%files utils

%doc contrib/xferstats.holger-preiss

%{_bindir}/ftpasswd

%{_bindir}/ftpcount

%{_bindir}/ftpmail

%{_bindir}/ftpquota

%{_bindir}/ftptop

%{_bindir}/ftpwho

%{_mandir}/man1/ftpasswd.1*

%{_mandir}/man1/ftpcount.1*

%{_mandir}/man1/ftpmail.1*

%{_mandir}/man1/ftpquota.1*

%{_mandir}/man1/ftptop.1*

%{_mandir}/man1/ftpwho.1*

%changelog

* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.6-4.1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

* Fri Jul 28 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.6-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

* Thu Jul 13 2017 Paul Howarth <paul@city-fan.org> - 1.3.6-3

- mod_sftp failed to check shadow password information when publickey

  authentication used (http://bugs.proftpd.org/show_bug.cgi?id=4308)

- Use of "AllowEmptyPasswords off" broke SFTP/SCP logins

  (http://bugs.proftpd.org/show_bug.cgi?id=4309)

* Thu Jul 13 2017 Petr Pisar <ppisar@redhat.com> - 1.3.6-2

- perl dependency renamed to perl-interpreter

  <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>

* Mon May 22 2017 Paul Howarth <paul@city-fan.org> - 1.3.6-1

- Update to 1.3.6 (see NEWS for details)

- Update mod_vroot to 0.9.5 (API compatibility with 1.3.6)

- Add upstream fixes for flaky API tests

  (https://github.com/proftpd/proftpd/issues/483)

  (https://github.com/proftpd/proftpd/pull/510)

  (https://github.com/proftpd/proftpd/pull/514)

- Add functionality to disable external network tests

  (https://github.com/proftpd/proftpd/pull/497)

- Update template TLS configuration

- PCRE 7.0 always available for use now

- Disable PCRE support for now as JIT compiler has SELinux issues

  (https://bugs.exim.org/show_bug.cgi?id=1749)

- Update proftpd.service to use Type=simple rather than Type=forking

  (https://github.com/proftpd/proftpd/pull/506)

- Remove redundant bind() to controls socket

  (https://github.com/proftpd/proftpd/issues/501)

- Fix similars functionality and unit test

  (https://github.com/proftpd/proftpd/pull/513)

- Integration tests can use system Test::Unit now

- tcpd.h can always be found in tcp_wrappers-devel now

* Wed May  3 2017 Paul Howarth <paul@city-fan.org> - 1.3.5e-2

- AllowChrootSymlinks off could cause login failures depending on filesystem

  permissions: use the IDs of the logging-in user to perform the directory

  walk, looking for symlinks, to be more consistent with similar checks done

  during login (#1443507, upstream bug 4306)

- Crypt::CrackLib always available now

* Mon Apr 10 2017 Paul Howarth <paul@city-fan.org> - 1.3.5e-1

- Update to 1.3.5e

  - SFTP clients using umac-64@openssh.com digest failed to connect

    (upstream bug 4287)

  - SFTP rekeying failure with ProFTPD 1.3.5d, caused by null pointer

    dereference (upstream bug 4288)

  - AllowChrootSymlinks off did not check entire DefaultRoot path for symlinks

    (CVE-2017-7418, upstream bug 4295)

- Change shellbangs in shipped perl scripts to use system perl

- Drop EL-5 support

  - Drop BuildRoot: and Group: tags

  - Drop explicit buildroot cleaning in %%install section

  - Drop explicit %%clean section

  - /etc/pam.d/password-auth always available now

  - pcre 7.0 or later always available now

* Sun Feb 12 2017 Paul Howarth <paul@city-fan.org> - 1.3.5d-3

- Properly allocate (and clear) the UMAC contexts, to fix segfault in mod_sftp

  (#1420365, upstream bug 4287)

* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.5d-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

* Mon Jan 16 2017 Paul Howarth <paul@city-fan.org> - 1.3.5d-1

- Update to 1.3.5d

  - Support OpenSSL 1.1.x API (upstream bug 4275)

  Bug fixes:

  - SSH rekey during authentication can cause issues with clients

    (upstream bug 4254)

  - Recursive SCP uploads of multiple directories not handled properly

    (upstream bug 4257)

  - LIST returns different results for file, depending on path syntax

    (upstream bug 4259)

  - "AuthAliasOnly on" in server config breaks anonymous logins

    (upstream bug 4255)

  - CapabilitiesEngine directive not honored for <IfUser>/<IfGroup> sections

    (upstream bug 4272)

  - Memory leak when mod_facl is used (upstream bug 4278)

  - All FTP logins treated as anonymous logins again (upstream bug 4283,

    regression in 1.3.5c of upstream bug 3307)

* Sat Nov 19 2016 Paul Howarth <paul@city-fan.org> - 1.3.5b-3

- Support OpenSSL 1.1.x API (upstream bug 4275)

* Sat May 21 2016 Paul Howarth <paul@city-fan.org> - 1.3.5b-2

- Handle client/server version skew in mod_sql_mysql

  (https://forums.proftpd.org/smf/index.php?topic=11887.0)

- Fix a possible cause of segfaults in mod_sftp (#1337880, upstream bug 4203)

- BR: perl-generators for correct dependencies in utils sub-package

* Fri Mar 11 2016 Paul Howarth <paul@city-fan.org> - 1.3.5b-1

- Update to 1.3.5b

  - mod_geoip did not load all of the GeoIPTables properly (upstream bug 4187)

  - "Incorrect string value" reported by mod_sql_mysql for some UTF8 characters

    (upstream bug 4191)

  - SSH rekey failed when using RSA hostkey smaller than 2048 bits

    (upstream bug 4097)

  - MLSD/MLST fact type "cdir" is incorrectly used for the current working

    directory (upstream bug 4198)

  - HiddenStores temporary files not removed when exceeding quota using SCP

    (upstream bug 4201)

  - MLSD lines not properly terminated with CRLF (upstream bug 4202)

  - Zero-length memory allocation possible, with undefined results

    (upstream bug 4209)

  - Avoid unbounded SFTP extended attribute key/values (upstream bug 4210)

  - Ensure that FTP data transfer commands fail appropriately when

    "RootRevoke on" is in effect (upstream bug 4212)

  - Handle FTP re-authentication attempts better (upstream bug 4217)

  - Permissions on files uploaded via STOU did not honor configured Umask

    (upstream bug 4223)

  - Support SFTP clients that send multiple INIT requests (upstream bug 4227)

  - TLSDHParamFile directive appears ignored because unexpected DH is chosen

    (upstream bug 4230)

- Drop unbundled old version of mod_geoip

- Drop upstreamed patches

* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.5a-6

- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

* Tue Dec  1 2015 Paul Howarth <paul@city-fan.org> - 1.3.5a-5

- Avoid unbounded SFTP extended attribute key/values

  (#1286977, http://bugs.proftpd.org/show_bug.cgi?id=4210)

* Thu Oct 29 2015 Paul Howarth <paul@city-fan.org> - 1.3.5a-4

- See if we can fix crash in mod_lang

  http://bugs.proftpd.org/show_bug.cgi?id=4206

  https://retrace.fedoraproject.org/faf/reports/10744/

* Thu Sep 10 2015 Paul Howarth <paul@city-fan.org> - 1.3.5a-3

- Add dependency on perl(Crypt::Cracklib), needed for ftpasswd --use-cracklib

* Thu Jun 18 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.5a-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

* Thu May 28 2015 Paul Howarth <paul@city-fan.org> - 1.3.5a-1

- Update to 1.3.5a

  - Fixed "stalled" SSL/TLS handshakes for data transfers

  - Fixed handling of SSH keys with overlong Comment headers in mod_sftp_sql

  - By default, mod_tls will no longer support SSLv3 connections; in order to

    support SSLv3 connections (for sites that need to), you must explicitly

    configure this via the TLSProtocol directive, e.g.:

    TLSProtocol SSLv3 TLSv1 ...

  - The mod_copy module is enabled by default; there may be cases where the

    module should be disabled, without requiring a rebuild of the server, thus

    mod_copy now supports a CopyEngine directive to enable/disable the module

  - The DeleteAbortedStores directive (for Bug#3917) is only enabled when

    HiddenStores is in effect, as intended when originally implemented, rather

    than all the time

  - Many other bug-fixes, see NEWS for details

- Drop upstreamed patches

* Wed May 27 2015 Paul Howarth <paul@city-fan.org> - 1.3.5-7

- Update mod_vroot to 0.9.4

  - Fix broken vroot alias checks (GH#4, GH#5)

  - Improve documentation

  - Add further regression tests

* Tue Apr 28 2015 Paul Howarth <paul@city-fan.org> - 1.3.5-6

- Unauthenticated copying of files via SITE CPFR/CPTO was allowed by mod_copy

  (CVE-2015-3306, http://bugs.proftpd.org/show_bug.cgi?id=4169)