#

# Rebuild switch:

#  --with integrationtests	enable integration tests (not fully maintained, may fail)

#

# This package uses systemd init from Fedora 16, but can use it for

# Fedora 15 if built using --with systemd

%if 0%{?fedora} > 15 || 0%{?rhel} > 6

%global _with_systemd --with-systemd

%endif

%global use_systemd %{!?_with_systemd:0}%{?_with_systemd:1}

# With systemd, the runtime directory is /run rather than /var/run

%if %{use_systemd}

%global rundir /run

%else

%global rundir %{_localstatedir}/run

%endif

# rundir (/var/run or /run) is on tmpfs from Fedora 15, RHEL 7

%if 0%{?fedora} > 14 || 0%{?rhel} > 6

%global rundir_tmpfs 1

%endif

# Support systemd presets from Fedora 18, RHEL 7

%if 0%{?fedora} > 17 || 0%{?rhel} > 6

%global preset_support 1

%endif

# For memcached support we need libmemcached >= 0.41, available from F-14 (EL-6 and below have libmemcached 0.31)

%if 0%{?rhel} > 6 || 0%{?fedora} > 13

%global have_libmemcached 1

%endif

# Do a hardened build where possible

%global _hardened_build 1

#global prever rc3

%global rpmrel 4

Summary:		Flexible, stable and highly-configurable FTP server

Name:			proftpd

Version:		1.3.5e

Release:		%{?prever:0.}%{rpmrel}%{?prever:.%{prever}}%{?dist}

License:		GPLv2+

URL:			http://www.proftpd.org/

Source0:		ftp://ftp.proftpd.org/distrib/source/proftpd-%{version}%{?prever}.tar.gz

Source1:		proftpd.conf

Source5:		proftpd-welcome.msg

Source9:		proftpd.sysconfig

Source10:		http://www.castaglia.org/proftpd/modules/proftpd-mod-vroot-0.9.2.tar.gz

# The integration tests require perl(Test::Unit) 0.14, which is the latest release on CPAN

# However, the version in Fedora is 0.25 from sourceforge, which is incompatible with the test suite,

# so we bundle version 0.14 here, purely for use during builds with the integration tests enabled

# (they are disabled by default); it is not included as part of the built package and should therefore

# not fall foul of the rules against library bundling

Source13:		http://search.cpan.org/CPAN/authors/id/C/CL/CLEMBURG/Test-Unit-0.14.tar.gz

Patch0:			https://github.com/proftpd/proftpd/commit/d800ece1.patch

Patch1:			proftpd-1.3.5e-shellbang.patch

Patch2:			proftpd.conf-no-memcached.patch

Patch3:			https://github.com/proftpd/proftpd/commit/459693c7.patch

Patch4:			proftpd-1.3.4rc1-mod_vroot-test.patch

Patch5:			proftpd-1.3.5e-insecure-sftp-host-key.patch

Patch27:		proftpd-mod-vroot-0.9.2-bug3841.patch

BuildRequires:		coreutils

BuildRequires:		gcc

BuildRequires:		GeoIP-devel

BuildRequires:		gettext

BuildRequires:		libacl-devel

BuildRequires:		libcap-devel

%if 0%{?have_libmemcached:1}

BuildRequires:		libmemcached-devel >= 0.41

%endif

BuildRequires:		mysql-devel

BuildRequires:		ncurses-devel

BuildRequires:		openldap-devel

BuildRequires:		openssl-devel

BuildRequires:		pam-devel

BuildRequires:		pcre-devel >= 7.0

BuildRequires:		perl

BuildRequires:		perl-generators

BuildRequires:		pkgconfig

BuildRequires:		tcp_wrappers-devel

BuildRequires:		postgresql-devel

BuildRequires:		sqlite-devel

BuildRequires:		tar

BuildRequires:		zlib-devel

# Test suite requirements

BuildRequires:		check-devel

%if 0%{?_with_integrationtests:1}

BuildRequires:		perl(Compress::Zlib)

BuildRequires:		perl(IO::Socket::SSL)

BuildRequires:		perl(Net::FTPSSL)

BuildRequires:		perl(Net::SSLeay)

BuildRequires:		perl(Net::Telnet)

BuildRequires:		perl(Test::Harness)

BuildRequires:		perl(Time::HiRes)

%endif

# Need systemd-units for ownership of /usr/lib/tmpfiles.d directory

%if 0%{?rundir_tmpfs:1}

Requires:		systemd-units

%endif

Requires(preun):	coreutils, findutils

%if %{use_systemd}

BuildRequires:		systemd-units

Requires(post):		systemd-units

Requires(preun):	systemd-units

Requires(postun):	systemd-units

%else

Requires(post):		/sbin/chkconfig

Requires(preun):	/sbin/service, /sbin/chkconfig

Requires(postun):	/sbin/service

%endif

Provides:		ftpserver

%description

ProFTPD is an enhanced FTP server with a focus toward simplicity, security,

and ease of configuration. It features a very Apache-like configuration

syntax, and a highly customizable server infrastructure, including support for

multiple 'virtual' FTP servers, anonymous FTP, and permission-based directory

visibility.

This package defaults to the standalone behavior of ProFTPD, but all the

needed scripts to have it run by xinetd instead are included.

%package devel

Summary:	ProFTPD - Tools and header files for developers

Requires:	%{name} = %{version}-%{release}

# devel package requires the same devel packages as were build-required

# for the main package

Requires:	gcc, libtool

Requires:	GeoIP-devel

Requires:	libacl-devel

Requires:	libcap-devel

%if 0%{?have_libmemcached:1}

Requires:	libmemcached-devel >= 0.41

%endif

Requires:	mysql-devel

Requires:	ncurses-devel

Requires:	openldap-devel

Requires:	openssl-devel

Requires:	pam-devel

Requires:	pcre-devel

Requires:	postgresql-devel

Requires:	pkgconfig

Requires:	tcp_wrappers-devel

Requires:	sqlite-devel

Requires:	zlib-devel

%description devel

This package is required to build additional modules for ProFTPD.

%package ldap

Summary:	Module to add LDAP support to the ProFTPD FTP server

Requires:	%{name} = %{version}-%{release}

%description ldap

Module to add LDAP support to the ProFTPD FTP server.

%package mysql

Summary:	Module to add MySQL support to the ProFTPD FTP server

Requires:	%{name} = %{version}-%{release}

%description mysql

Module to add MySQL support to the ProFTPD FTP server.

%package postgresql

Summary:	Module to add PostgreSQL support to the ProFTPD FTP server

Requires:	%{name} = %{version}-%{release}

%description postgresql

Module to add PostgreSQL support to the ProFTPD FTP server.

%package sqlite

Summary:	Module to add SQLite support to the ProFTPD FTP server

Requires:	%{name} = %{version}-%{release}

%description sqlite

Module to add SQLite support to the ProFTPD FTP server.

%package utils

Summary:	ProFTPD - Additional utilities

Requires:	%{name} = %{version}-%{release}

Requires:	perl

# ftpasswd --use-cracklib requires Crypt::Cracklib

BuildRequires:	perl(Crypt::Cracklib)

Requires:	perl(Crypt::Cracklib)

%description utils

This package contains additional utilities for monitoring and configuring the

ProFTPD server:

* ftpasswd: generate passwd(5) files for use with AuthUserFile

* ftpcount: show the current number of connections per server/virtualhost

* ftpmail: monitor transfer log and send email when files uploaded

* ftpquota: manipulate quota tables

* ftptop: show the current status of FTP sessions

* ftpwho: show the current process information for each FTP session

%prep

%setup -q -n %{name}-%{version}%{?prever} -a 10 -a 13

# Copy mod_vroot source, documentation and tests into place

cp -p mod_vroot/mod_vroot.c contrib/

cp -p mod_vroot/mod_vroot.html doc/contrib/

cp -p mod_vroot/t/lib/ProFTPD/Tests/Modules/mod_vroot.pm \

	tests/t/lib/ProFTPD/Tests/Modules/

cp -p mod_vroot/t/modules/mod_vroot.t tests/t/modules/

# Copy default config file into place

cp -p %{SOURCE1} proftpd.conf

# See if we can fix crash in mod_lang

# http://bugs.proftpd.org/show_bug.cgi?id=4206

# https://retrace.fedoraproject.org/faf/reports/10744/

%patch0 -p1

# Change shellbangs /usr/bin/env perl ⇒ /usr/bin/perl

%patch1

# Check for symlinks in home directory path as logged-in user

# http://bugs.proftpd.org/show_bug.cgi?id=4306

# https://bugzilla.redhat.com/show_bug.cgi?id=1443507

# https://github.com/proftpd/proftpd/pull/496

%patch3 -p1

# If we're running the full test suite, include the mod_vroot test

%patch4 -p1 -b .test_vroot

# Add InsecureHostKeyPerms SFTP option

# http://bugs.proftpd.org/show_bug.cgi?id=4098

# https://bugzilla.redhat.com/show_bug.cgi?id=1522998

%patch5

# Fix possible symlink race when applying UserOwner to newly created directory

# http://bugs.proftpd.org/show_bug.cgi?id=3841

%patch27

# Avoid documentation name conflicts

mv contrib/README contrib/README.contrib

# If we don't have libmemcached support, remove the mod_tls_memcache

# snippet from the config file

%if 0%{!?have_libmemcached:1}

%patch2

%endif

# Tweak logrotate script for systemd compatibility (#802178)

%if %{use_systemd}

sed -i -e '/killall/s/test.*/systemctl reload proftpd.service/' \

	contrib/dist/rpm/proftpd.logrotate

%endif

# Avoid docfile dependencies

chmod -x contrib/xferstats.holger-preiss

# Remove bogus exec permissions from source files

chmod -c -x include/tpl.h lib/tpl.c

%build

# Modules to be built as DSO's (excluding mod_ifsession, always specified last)

SMOD1=mod_sql:mod_sql_passwd:mod_sql_mysql:mod_sql_postgres:mod_sql_sqlite

SMOD2=mod_quotatab:mod_quotatab_file:mod_quotatab_ldap:mod_quotatab_radius:mod_quotatab_sql

SMOD3=mod_ldap:mod_ban:mod_wrap:mod_ctrls_admin:mod_facl:mod_load:mod_vroot

SMOD4=mod_radius:mod_ratio:mod_rewrite:mod_site_misc:mod_exec:mod_shaper:mod_geoip

SMOD5=mod_wrap2:mod_wrap2_file:mod_wrap2_sql:mod_copy:mod_deflate:mod_ifversion:mod_qos

SMOD6=mod_sftp:mod_sftp_pam:mod_sftp_sql:mod_tls_shmcache%{?have_libmemcached::mod_tls_memcache}

%configure \

			--libexecdir="%{_libexecdir}/proftpd" \

			--localstatedir="%{rundir}/proftpd" \

			--disable-strip \

			--enable-ctrls \

			--enable-dso \

			--enable-facl \

			--enable-ipv6 \

%{?have_libmemcached:	--enable-memcache} \

			--enable-nls \

			--enable-openssl \

			--enable-pcre \

			--enable-shadow \

			--enable-tests \

			--with-libraries="%{_libdir}/mysql" \

			--with-includes="%{_includedir}/mysql" \

			--with-modules=mod_readme:mod_auth_pam:mod_tls \

			--with-shared=${SMOD1}:${SMOD2}:${SMOD3}:${SMOD4}:${SMOD5}:${SMOD6}:mod_ifsession

make %{?_smp_mflags}

%install

make install DESTDIR=%{buildroot} \

	rundir="%{rundir}/proftpd" \

	INSTALL_USER=`id -un` \

	INSTALL_GROUP=`id -gn`

install -D -p -m 640 proftpd.conf	%{buildroot}%{_sysconfdir}/proftpd.conf

install -D -p -m 644 contrib/dist/rpm/proftpd.pam \

					%{buildroot}%{_sysconfdir}/pam.d/proftpd

%if %{use_systemd}

install -D -p -m 644 contrib/dist/rpm/proftpd.service \

					%{buildroot}%{_unitdir}/proftpd.service

%else

install -D -p -m 755 contrib/dist/rpm/proftpd.init.d \

					%{buildroot}%{_sysconfdir}/rc.d/init.d/proftpd

%endif

install -D -p -m 644 contrib/dist/rpm/xinetd \

					%{buildroot}%{_sysconfdir}/xinetd.d/xproftpd

install -D -p -m 644 contrib/dist/rpm/proftpd.logrotate \

					%{buildroot}%{_sysconfdir}/logrotate.d/proftpd

install -D -p -m 644 %{SOURCE5}		%{buildroot}%{_localstatedir}/ftp/welcome.msg

install -D -p -m 644 %{SOURCE9}		%{buildroot}%{_sysconfdir}/sysconfig/proftpd

mkdir -p %{buildroot}%{_localstatedir}/{ftp/{pub,uploads},log/proftpd}

touch %{buildroot}%{_sysconfdir}/ftpusers

# Make sure %%{rundir}/proftpd exists at boot time for systems where it's on tmpfs (#656675)

%if 0%{?rundir_tmpfs:1}

install -d -m 755 %{buildroot}%{_prefix}/lib/tmpfiles.d

install -p -m 644 contrib/dist/rpm/proftpd-tmpfs.conf \

					%{buildroot}%{_prefix}/lib/tmpfiles.d/proftpd.conf

%endif

# Find translations

%find_lang proftpd

%check

# Integration tests not fully maintained - stick to API tests only by default

%if 0%{?_with_integrationtests:1}

# Make sure we can find everything we need

export PERL5LIB=$(pwd)/Test-Unit-0.14/lib

export PROFTPD_TEST_DIR=$(pwd)/tests

ln ftpdctl ftpwho tests/

make check

%else

# API tests should always be OK

if ! make -C tests api-tests; then

	# Diagnostics to report upstream

	cat tests/api-tests.log

	./proftpd -V

	# Fail the build

	false

fi

%endif

%post

%if %{use_systemd}

/bin/systemctl daemon-reload &>/dev/null || :

%endif

if [ $1 -eq 1 ]; then

	# Initial installation

%if ! %{use_systemd}

	/sbin/chkconfig --add proftpd || :

%endif

%if 0%{?preset_support:1}

	/bin/systemctl preset proftpd.service &>/dev/null || :

%endif

	IFS=":"; cat /etc/passwd | \

	while { read username nu nu gid nu nu nu nu; }; do \

		if [ $gid -lt 100 -a "$username" != "ftp" ]; then

			echo $username >> %{_sysconfdir}/ftpusers

		fi

	done

fi

%preun

if [ $1 -eq 0 ]; then

	# Package removal, not upgrade

%if %{use_systemd}

	/bin/systemctl --no-reload disable proftpd.service &>/dev/null || :

	/bin/systemctl stop proftpd.service &>/dev/null || :

%else

	/sbin/service proftpd stop &>/dev/null || :

	/sbin/chkconfig --del proftpd || :

%endif

	find %{rundir}/proftpd -depth -mindepth 1 |

		xargs rm -rf &>/dev/null || :

fi

%postun

%if %{use_systemd}

/bin/systemctl daemon-reload &>/dev/null || :

%endif

if [ $1 -ge 1 ]; then

	# Package upgrade, not uninstall

%if %{use_systemd}

	/bin/systemctl try-restart proftpd.service &>/dev/null || :

%else

	/sbin/service proftpd condrestart &>/dev/null || :

%endif

else

	# Package removal, not upgrade

%if %{use_systemd}

	/bin/systemctl reload xinetd.service &>/dev/null || :

%else

	/sbin/service xinetd reload &>/dev/null || :

%endif

fi

%files -f proftpd.lang

%if 0%{?_licensedir:1}

%license COPYING

%else

%doc COPYING

%endif

%doc CREDITS ChangeLog NEWS README

%doc README.DSO README.modules README.IPv6 README.PAM

%doc README.capabilities README.classes README.controls README.facl

%doc contrib/README.contrib contrib/README.ratio

%doc doc/* sample-configurations/

%dir %{_localstatedir}/ftp/

%dir %{_localstatedir}/ftp/pub/

%dir %{rundir}/proftpd/

%config(noreplace) %{_localstatedir}/ftp/welcome.msg

%config(noreplace) %{_sysconfdir}/blacklist.dat

%config(noreplace) %{_sysconfdir}/dhparams.pem

%config(noreplace) %{_sysconfdir}/ftpusers

%config(noreplace) %{_sysconfdir}/logrotate.d/proftpd

%config(noreplace) %{_sysconfdir}/pam.d/proftpd

%config(noreplace) %{_sysconfdir}/proftpd.conf

%config(noreplace) %{_sysconfdir}/sysconfig/proftpd

%config(noreplace) %{_sysconfdir}/xinetd.d/xproftpd

%if %{use_systemd}

%{_unitdir}/proftpd.service

%else

%{_sysconfdir}/rc.d/init.d/proftpd

%endif

%if 0%{?rundir_tmpfs:1}

%{_prefix}/lib/tmpfiles.d/proftpd.conf

%endif

%{_bindir}/ftpdctl

%{_sbindir}/ftpscrub

%{_sbindir}/ftpshut

%{_sbindir}/in.proftpd

%{_sbindir}/proftpd

%{_mandir}/man5/proftpd.conf.5*

%{_mandir}/man5/xferlog.5*

%{_mandir}/man8/ftpdctl.8*

%{_mandir}/man8/ftpscrub.8*

%{_mandir}/man8/ftpshut.8*

%{_mandir}/man8/proftpd.8*

%dir %{_libexecdir}/proftpd/

%{_libexecdir}/proftpd/mod_ban.so

%{_libexecdir}/proftpd/mod_ctrls_admin.so

%{_libexecdir}/proftpd/mod_copy.so

%{_libexecdir}/proftpd/mod_deflate.so

%{_libexecdir}/proftpd/mod_exec.so

%{_libexecdir}/proftpd/mod_facl.so

%{_libexecdir}/proftpd/mod_geoip.so

%{_libexecdir}/proftpd/mod_ifsession.so

%{_libexecdir}/proftpd/mod_ifversion.so

%{_libexecdir}/proftpd/mod_load.so

%{_libexecdir}/proftpd/mod_qos.so

%{_libexecdir}/proftpd/mod_quotatab.so

%{_libexecdir}/proftpd/mod_quotatab_file.so

%{_libexecdir}/proftpd/mod_quotatab_radius.so

%{_libexecdir}/proftpd/mod_quotatab_sql.so

%{_libexecdir}/proftpd/mod_radius.so

%{_libexecdir}/proftpd/mod_ratio.so

%{_libexecdir}/proftpd/mod_rewrite.so

%{_libexecdir}/proftpd/mod_sftp.so

%{_libexecdir}/proftpd/mod_sftp_pam.so

%{_libexecdir}/proftpd/mod_sftp_sql.so

%{_libexecdir}/proftpd/mod_shaper.so

%{_libexecdir}/proftpd/mod_site_misc.so

%{_libexecdir}/proftpd/mod_sql.so

%{_libexecdir}/proftpd/mod_sql_passwd.so

%{?have_libmemcached:%{_libexecdir}/proftpd/mod_tls_memcache.so}

%{_libexecdir}/proftpd/mod_tls_shmcache.so

%{_libexecdir}/proftpd/mod_vroot.so

%{_libexecdir}/proftpd/mod_wrap.so

%{_libexecdir}/proftpd/mod_wrap2.so

%{_libexecdir}/proftpd/mod_wrap2_file.so

%{_libexecdir}/proftpd/mod_wrap2_sql.so

%exclude %{_libexecdir}/proftpd/*.a

%exclude %{_libexecdir}/proftpd/*.la

%attr(331, ftp, ftp) %dir %{_localstatedir}/ftp/uploads/

%attr(750, root, root) %dir %{_localstatedir}/log/proftpd/

%files devel

%{_bindir}/prxs

%{_includedir}/proftpd/

%{_libdir}/pkgconfig/proftpd.pc

%files ldap

%doc README.LDAP contrib/mod_quotatab_ldap.ldif contrib/mod_quotatab_ldap.schema

%{_libexecdir}/proftpd/mod_ldap.so

%{_libexecdir}/proftpd/mod_quotatab_ldap.so

%files mysql

%{_libexecdir}/proftpd/mod_sql_mysql.so

%files postgresql

%{_libexecdir}/proftpd/mod_sql_postgres.so

%files sqlite

%{_libexecdir}/proftpd/mod_sql_sqlite.so

%files utils

%doc contrib/xferstats.holger-preiss

%{_bindir}/ftpasswd

%{_bindir}/ftpcount

%{_bindir}/ftpmail

%{_bindir}/ftpquota

%{_bindir}/ftptop

%{_bindir}/ftpwho

%{_mandir}/man1/ftpasswd.1*

%{_mandir}/man1/ftpcount.1*

%{_mandir}/man1/ftpmail.1*

%{_mandir}/man1/ftpquota.1*

%{_mandir}/man1/ftptop.1*

%{_mandir}/man1/ftpwho.1*

%changelog

* Thu Dec  7 2017 Paul Howarth <paul@city-fan.org> - 1.3.5e-4

- Add InsecureHostKeyPerms SFTP option (#1522998, upstream bug 4098)

* Wed Sep 20 2017 Paul Howarth <paul@city-fan.org> - 1.3.5e-3

- Add sqlite sub-package with mod_sql_sqlite for SQLite support (#1328321)

* Wed May  3 2017 Paul Howarth <paul@city-fan.org> - 1.3.5e-2

- AllowChrootSymlinks off could cause login failures depending on filesystem

  permissions: use the IDs of the logging-in user to perform the directory

  walk, looking for symlinks, to be more consistent with similar checks done

  during login (#1443507, upstream bug 4306)

- Crypt::CrackLib always available now

* Mon Apr 10 2017 Paul Howarth <paul@city-fan.org> - 1.3.5e-1

- Update to 1.3.5e

  - SFTP clients using umac-64@openssh.com digest failed to connect

    (upstream bug 4287)

  - SFTP rekeying failure with ProFTPD 1.3.5d, caused by null pointer

    dereference (upstream bug 4288)

  - AllowChrootSymlinks off did not check entire DefaultRoot path for symlinks

    (CVE-2017-7418, upstream bug 4295)

- Change shellbangs in shipped perl scripts to use system perl

- Drop EL-5 support

  - Drop BuildRoot: and Group: tags

  - Drop explicit buildroot cleaning in %%install section

  - Drop explicit %%clean section

  - /etc/pam.d/password-auth always available now

  - pcre 7.0 or later always available now

* Wed Feb  8 2017 Paul Howarth <paul@city-fan.org> - 1.3.5d-2

- Properly allocate (and clear) the UMAC contexts, to fix segfault in mod_sftp

  (#1420365, upstream bug 4287)

* Mon Jan 16 2017 Paul Howarth <paul@city-fan.org> - 1.3.5d-1

- Update to 1.3.5d

  - Support OpenSSL 1.1.x API (upstream bug 4275)

  Bug fixes:

  - SSH rekey during authentication can cause issues with clients

    (upstream bug 4254)

  - Recursive SCP uploads of multiple directories not handled properly

    (upstream bug 4257)

  - LIST returns different results for file, depending on path syntax

    (upstream bug 4259)

  - "AuthAliasOnly on" in server config breaks anonymous logins

    (upstream bug 4255)

  - CapabilitiesEngine directive not honored for <IfUser>/<IfGroup> sections

    (upstream bug 4272)

  - Memory leak when mod_facl is used (upstream bug 4278)

  - All FTP logins treated as anonymous logins again (upstream bug 4283,

    regression in 1.3.5c of upstream bug 3307)

* Sat May 21 2016 Paul Howarth <paul@city-fan.org> - 1.3.5b-2

- Handle client/server version skew in mod_sql_mysql

  (https://forums.proftpd.org/smf/index.php?topic=11887.0)

- Fix a possible cause of segfaults in mod_sftp (#1337880, upstream bug 4203)

- See if we can fix crash in mod_lang

  http://bugs.proftpd.org/show_bug.cgi?id=4206

  https://retrace.fedoraproject.org/faf/reports/10744/

- BR: perl-generators for correct dependencies in utils sub-package

- Prefer %%global over %%define

* Fri Mar 11 2016 Paul Howarth <paul@city-fan.org> - 1.3.5b-1

- Update to 1.3.5b

  - mod_geoip did not load all of the GeoIPTables properly (upstream bug 4187)

  - "Incorrect string value" reported by mod_sql_mysql for some UTF8 characters

    (upstream bug 4191)

  - SSH rekey failed when using RSA hostkey smaller than 2048 bits

    (upstream bug 4097)

  - MLSD/MLST fact type "cdir" is incorrectly used for the current working

    directory (upstream bug 4198)

  - HiddenStores temporary files not removed when exceeding quota using SCP

    (upstream bug 4201)

  - MLSD lines not properly terminated with CRLF (upstream bug 4202)

  - Zero-length memory allocation possible, with undefined results

    (upstream bug 4209)

  - Avoid unbounded SFTP extended attribute key/values (upstream bug 4210)

  - Ensure that FTP data transfer commands fail appropriately when

    "RootRevoke on" is in effect (upstream bug 4212)

  - Handle FTP re-authentication attempts better (upstream bug 4217)

  - Permissions on files uploaded via STOU did not honor configured Umask

    (upstream bug 4223)

  - Support SFTP clients that send multiple INIT requests (upstream bug 4227)

  - TLSDHParamFile directive appears ignored because unexpected DH is chosen

    (upstream bug 4230)

- Drop unbundled old version of mod_geoip

- Drop upstreamed patches

* Tue Dec  1 2015 Paul Howarth <paul@city-fan.org> - 1.3.5a-2

- Avoid unbounded SFTP extended attribute key/values

  (#1286977, http://bugs.proftpd.org/show_bug.cgi?id=4210)

* Thu May 28 2015 Paul Howarth <paul@city-fan.org> - 1.3.5a-1

- Update to 1.3.5a

  - Fixed "stalled" SSL/TLS handshakes for data transfers

  - Fixed handling of SSH keys with overlong Comment headers in mod_sftp_sql

  - By default, mod_tls will no longer support SSLv3 connections; in order to

    support SSLv3 connections (for sites that need to), you must explicitly

    configure this via the TLSProtocol directive, e.g.:

    TLSProtocol SSLv3 TLSv1 ...

  - The mod_copy module is enabled by default; there may be cases where the

    module should be disabled, without requiring a rebuild of the server, thus

    mod_copy now supports a CopyEngine directive to enable/disable the module

  - The DeleteAbortedStores directive (for Bug#3917) is only enabled when

    HiddenStores is in effect, as intended when originally implemented, rather

    than all the time

  - Many other bug-fixes, see NEWS for details

- Drop upstreamed patches

* Tue Apr 28 2015 Paul Howarth <paul@city-fan.org> - 1.3.5-5

- Unauthenticated copying of files via SITE CPFR/CPTO was allowed by mod_copy

  (CVE-2015-3306, http://bugs.proftpd.org/show_bug.cgi?id=4169)

* Tue Feb 10 2015 Paul Howarth <paul@city-fan.org> - 1.3.5-4

- Anonymous upload directory specification needs to be slightly different if

  mod_vroot is in use (#1045922)

  http://sourceforge.net/p/proftp/mailman/message/31728570/

- Use %%license where possible

* Fri May 16 2014 Paul Howarth <paul@city-fan.org> 1.3.5-2

- Add upstream fix to ignore any ENOPROTOOPT errors when setting the

  IPv6 TCLASS (TOS) flags on the socket; they make for noisier logging

  without providing any actual value to the user/admin (upstream bug 4055)

* Fri May 16 2014 Paul Howarth <paul@city-fan.org> 1.3.5-1

- Update to 1.3.5 (see NEWS for details)

- Drop upstreamed patches

- Drop sysv-to-systemd migration script

- No longer need to support pam_stack

* Fri Dec 20 2013 Paul Howarth <paul@city-fan.org> 1.3.4d-5

- Fix support for 8192-bit DH parameters (#1044586)

- Add 3072-bit and 7680-bit DH parameters (upstream bug 4002)

* Sat Sep 14 2013 Paul Howarth <paul@city-fan.org> 1.3.4d-4

- Fix mod_sftp/mod_sftp_pam invalid pool allocation during kbdint authentication

  (#1007678, upstream bug #3973, CVE-2013-4359)

* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 1.3.4d-2.2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

* Wed Jul 17 2013 Petr Pisar <ppisar@redhat.com> 1.3.4d-2.1

- Perl 5.18 rebuild

* Mon Jun 17 2013 Paul Howarth <paul@city-fan.org> 1.3.4d-2

- Fix spurious log messages at session close (upstream bug #3945)

* Sat Jun 15 2013 Paul Howarth <paul@city-fan.org> 1.3.4d-1

- Update to 1.3.4d

  - Fixed broken build when using --disable-ipv6 configure option

  - Fixed mod_sql "SQLAuthType Backend" MySQL issues

  - Various other bugs fixed - see NEWS for details

- Drop upstreamed patch for PAM session closing

* Tue Apr 16 2013 Paul Howarth <paul@city-fan.org> 1.3.4c-2

- Make sure we can switch back to root before closing PAM sessions so that

  they're closed properly and don't pollute the system logs with dbus reject

  messages (#951728, upstream bug #3929)

* Thu Mar  7 2013 Paul Howarth <paul@city-fan.org> 1.3.4c-1

- Update to 1.3.4c

  - Added Spanish translation

  - Fixed several mod_sftp issues, including SFTPPassPhraseProvider,

    handling of symlinks for REALPATH requests, and response code logging

  - Fixed symlink race for creating directories when UserOwner is in effect

  - Increased performance of FTP directory listings

- Drop MySQL password patch, no longer needed

- Drop upstreamed proftpd patch for CVE-2012-6095

- Update patch for bug 3744 to apply against updated proftpd code

* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 1.3.4b-6

- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

* Wed Jan 16 2013 Paul Howarth <paul@city-fan.org> 1.3.4b-5

- Update patch for CVE-2012-6095 to cover vroot cases

* Mon Jan  7 2013 Paul Howarth <paul@city-fan.org> 1.3.4b-4

- Fix possible symlink race when applying UserOwner to newly created directory

  (CVE-2012-6095, #892715, http://bugs.proftpd.org/show_bug.cgi?id=3841)

* Sat Sep 22 2012  Remi Collet <remi@fedoraproject.org> 1.3.4b-3

- Rebuild against libmemcached.so.11 without SASL

* Thu Aug 30 2012 Paul Howarth <paul@city-fan.org> 1.3.4b-2

- Add support for systemd presets in Fedora 18+ (#850281)

* Wed Aug  1 2012 Paul Howarth <paul@city-fan.org> 1.3.4b-1

- Update to 1.3.4b

  - Fixed mod_ldap segfault on login when LDAPUsers with no filters used

  - Fixed sporadic SFTP upload issues for large files

  - Fixed SSH2 handling for some clients (e.g. OpenVMS)

  - New FactsOptions directive; see doc/modules/mod_facts.html#FactsOptions

  - Fixed build errors on Tru64, AIX, Cygwin

  - Lots of bugs fixed - see NEWS for details

- No bzipped tarball release this time, so revert to gzipped one

- Drop patches for fixes included in upstream release

* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 1.3.4a-11

- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

* Tue Jul  3 2012 Paul Howarth <paul@city-fan.org> 1.3.4a-10

- Move tmpfiles.d file from %%{_sysconfdir} to %%{_prefix}/lib

* Sat Apr 21 2012 Paul Howarth <paul@city-fan.org> 1.3.4a-9

- Rebuild for new libmemcached in Rawhide