openssl-ibmca (2.2.3-0ubuntu1.1) jammy; urgency=medium

  * Fix IBMCA engine security vulnerability LP: #2015454 by adding:
    - d/p/lp-2015454-engine-Enable-RSA-blinding-and-offload-blinding-setu.patch

 -- Frank Heimes <frank.heimes@canonical.com>  Wed, 12 Apr 2023 20:33:30 +0200

openssl-ibmca (2.2.3-0ubuntu1) jammy; urgency=medium

  * New upstream release. LP: #1967141
  * The difference between 2.2.2 and 2.2.3 includes just these two fixes:
    - "PKEY: Fix usage of ECX keys"
    - "use correct libica for ibmca_mechaList_test"
    Rather than adding these as quilt patches, raising the package to the
    bugfix-only version that incl. them is preferable.
  * For "PKEY: Fix usage of ECX keys" a backport of
    "Fix compilation for OpenSSL 3.0" was needed:
    d/p/e59cce5-Fix-compilation-for-OpenSSL-3.0.patch
  * For convenience reasons a generated sample config is now included in
    the package, but also the optional configuration generator Perl script
    'ibmca-engine-opensslconfig'.
  * d/control: add dh-autoreconf to Build-Depends to work around a Lintian
    regression on missing-build-dependency-for-dh-addon

 -- Frank Heimes <frank.heimes@canonical.com>  Wed, 30 Mar 2022 19:19:00 +0100

openssl-ibmca (2.2.2-0ubuntu1) jammy; urgency=medium

  * New upstream release. LP: #1960004
  * compatibility to libica4 is now included
  * d/control modified to depend on libica4
  * removed d/p/disable-3des-ecb-test.patch since the tests got fixed upstream
  * d/p/openssl-witness.cnf needed to be refreshed
  * d/p/testconf-openssl3.patch added initialization and refreshed

 -- Frank Heimes <frank.heimes@canonical.com>  Fri, 04 Feb 2022 09:54:15 +0100

openssl-ibmca (2.2.1-0ubuntu1) jammy; urgency=medium

  * New upstream release. LP: #1958419 

  [Simon Chopin]
  * d/p/testconf-openssl3.patch: fix the test suite against OpenSSL 3.0
  * d/p/disable-3des-ecb-test.patch: Temporarily disable a failing test
  * d/rules: make the build fail if the tests fail

 -- Frank Heimes <frank.heimes@canonical.com>  Thu, 20 Jan 2022 15:44:47 +0100

openssl-ibmca (2.2.0-0ubuntu2) jammy; urgency=medium

  * No-change rebuild against openssl3

 -- Simon Chopin <simon.chopin@canonical.com>  Tue, 07 Dec 2021 15:45:01 +0100

openssl-ibmca (2.2.0-0ubuntu1) impish; urgency=medium

  * New upstream release. LP: #1929052

 -- Matthieu Clemenceau <matthieu.clemenceau@canonical.com>  Fri, 18 Jun 2021 12:02:24 -0500

openssl-ibmca (2.1.2-0ubuntu1) impish; urgency=medium

  * New upstream release.  LP: #1926584.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Thu, 29 Apr 2021 08:41:11 -0700

openssl-ibmca (2.1.1-0ubuntu1) groovy; urgency=medium

  * New upstream release. LP: #1884763

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Wed, 26 Aug 2020 20:14:28 +0100

openssl-ibmca (2.1.0-0ubuntu1) eoan; urgency=medium

  * New upstream release LP: #1836865

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Mon, 07 Oct 2019 11:30:34 +0100

openssl-ibmca (2.0.3-0ubuntu1) eoan; urgency=medium

  * New upstream release LP: #1826198

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Tue, 30 Apr 2019 12:34:27 +0100

openssl-ibmca (2.0.2-0ubuntu2) disco; urgency=medium

  * Rework error string init and exit. LP: #1819487

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Mon, 18 Mar 2019 15:03:08 +0000

openssl-ibmca (2.0.2-0ubuntu1) disco; urgency=medium

  * New upstream release LP: #1804233 LP: #1806483
  * Drop dlopen-soname.patch, applied upstream.
  * Update watch file to github.com.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Mon, 10 Dec 2018 11:21:56 +1100

openssl-ibmca (2.0.0-0ubuntu2) cosmic; urgency=medium

  * Disable test-suite, as it appears to fail on launchpad builders, yet
    passes locally when uncontained.

 -- Dimitri John Ledkov 🌈 <xnox@ubuntu.com>  Fri, 15 Jun 2018 12:44:40 +0100

openssl-ibmca (2.0.0-0ubuntu1) cosmic; urgency=medium

  * New upstream release. LP: #1776209
  * Update debian/copyright to Apache-2

 -- Dimitri John Ledkov 🌈 <xnox@ubuntu.com>  Thu, 14 Jun 2018 12:10:32 +0100

openssl-ibmca (1.4.1-0ubuntu1) bionic; urgency=medium

  * New upstream release
  * Update watch file to point at github
  * Build against openssl1.1 with openssl1.1 engine paths LP: #1747626

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Fri, 23 Feb 2018 18:06:36 +0000

openssl-ibmca (1.4.0-0ubuntu2) bionic; urgency=high

  * No change rebuild against openssl1.1.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Tue, 06 Feb 2018 17:54:51 +0000

openssl-ibmca (1.4.0-0ubuntu1) artful; urgency=medium

  * New upstream release
  * Drop patches applied upstream

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Thu, 28 Sep 2017 11:13:14 -0400

openssl-ibmca (1.3.0-0ubuntu5) artful; urgency=medium

  * Apply upstream patch to resolve crashes when libssl attempts to
    initialise engine a few times too many. LP: #1543455

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Wed, 26 Jul 2017 08:48:51 +0100

openssl-ibmca (1.3.0-0ubuntu4) zesty; urgency=medium

  * Build against libica.so.3.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Wed, 30 Nov 2016 10:24:29 +0000

openssl-ibmca (1.3.0-0ubuntu3) zesty; urgency=medium

  * Attempt to dlopen libica.so.2, if libica.so (or ctrl provided one)
    fails. LP: #1605511
  * Add depends on libica2.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Tue, 04 Oct 2016 15:25:59 +0100

openssl-ibmca (1.3.0-0ubuntu2) xenial; urgency=medium

  * Correct license information. LP: 1543682
  * Add watch file.
  * Resolves LP: #1538864

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Mon, 15 Feb 2016 16:32:05 +0000

openssl-ibmca (1.3.0-0ubuntu1) xenial; urgency=medium

  * Initial release.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Fri, 05 Feb 2016 06:16:50 +0000
