Sync mandos 1.6.4-1 (universe) from Debian unstable (main)

Please sync mandos 1.6.4-1 (universe) from Debian unstable (main). It fixes all known current bugs in both Debian and Ubuntu, including some grave functionality bugs. We therefore request a freeze exception for this sync.

(Upstream has no ChangeLog.)

New NEWS file entries since current saucy version 1.6.0-1:

Version 1.6.4 (2014-02-16)
* Server
** Very minor fix to self-test code.
Version 1.6.3 (2014-01-21)
* Server
** Add systemd support.
** For PID file, fall back to /var/run if /run does not exist.
* Client
** Moved files from /usr/lib/mandos to whatever the architecture
   specifies, like /usr/lib/x86_64-linux-gnu/mandos or
   /usr/lib64/mandos.
Version 1.6.2 (2013-10-24)
* Server
** PID file moved from /var/run to /run.
** Bug fix: Handle long secrets when saving client state.
** Bug fix: Use more magic in the GnuTLS priority string to handle
   both old DSA/ELG 2048-bit keys and new RSA/RSA 4096-bit keys.
* Client
** mandos-keygen: Bug fix: now generate RSA keys which GnuTLS can use.
                  Bug fix: Output passphrase prompts even when
                  redirecting standard output.
Version 1.6.1 (2013-10-13)
* Server
** All client options for time intervals now also take an RFC 3339
   duration. The same for all options to mandos-ctl.
** Bug fix: Handle fast checkers (like ":") correctly.
** Bug fix: Don't print output from checkers when running in
   foreground.
** Bug fix: Do not fail when client is removed from clients.conf but
   saved settings remain.
** Bug fix: mandos-monitor now displays standout (reverse video) again
   using new version of Urwid.
** Bug fix: Make boolean options work from the config file again.
** Bug fix: Make --no-ipv6 work again.
** New default priority string to be slightly more compatible with
   older versions of GnuTLS.
* Client
** Bug fix: Fix bashism in mandos-keygen.
** Default key and subkey types are now RSA and RSA, respectively.
   Also, new default key size is 4096 bits.

New Debian Changelog entries since current saucy version 1.6.0-1:

mandos (1.6.4-1) unstable; urgency=medium

  * New upstream release.
  * debian/control (Build-Depends): Add Python dependencies to
                                    successfully run self-tests.
  * debian/copyright: GPLv3 now has its own license file - use it.
  * debian/watch: Set PGP signature URL.

 -- Teddy Hogeborn <email address hidden> Sun, 16 Feb 2014 14:09:25 +0100

mandos (1.6.3-1) unstable; urgency=low

  * New upstream release.
  * debian/control (Build-Depends): Added "systemd".
  * debian/mandos.dirs (lib/systemd/system): New.
  * debian/mandos-client.README.Debian: Refer to architecture libdir.
  * debian/control (mandos/Depends): Add "avahi-daemon (>= 0.6.31-3) |
                                     systemd-sysv".
  * debian/mandos.postinst: If avahi-daemon is version 0.6.31-2 or older,
                            edit /etc/init.d script headers Required-Start
                            and Required-Stop to have "avahi" instead of
                            "avahi-daemon", before insserv(8) sees it.
  * debian/mandos-client.lintian-overrides: Libdir changes.
  * debian/rules (override_dh_fixperms): - '' -

 -- Teddy Hogeborn <email address hidden> Tue, 21 Jan 2014 22:01:30 +0100

mandos (1.6.2-1) unstable; urgency=low

  * New upstream release.
  * debian/compat: Changed to "9".
  * debian/control (Build-Depends): Changed debhelper version to (>= 9).
    (Standards-Version): Updated to "3.9.4".
    (DM-Upload-Allowed): Removed.
    (mandos/Depends): Add "initscripts (>= 2.88dsf-13.3)" to be able to
                      use the "/run" directory (for mandos.pid).
  * debian/copyright (Copyright): Update year.
  * Fix "Mandos/gnutls fails to establish connection, "an algorithm that
    is not enabled was negotiated"" fixed by upstream. (Closes: #702120)

 -- Teddy Hogeborn <email address hidden> Thu, 24 Oct 2013 22:33:40 +0200

mandos (1.6.1-1) unstable; urgency=low

  * New upstream release.
  * debian/control (mandos/Depends): No longer depends on
                                     python-gnupginterface, but does
                                     depend on gnupg (<< 2).
    (Build-Depends): Depend on debhelper 8.9.7 for using "override-*-arch"
                     and "override-*-indep" targets in debian/rules.
  * debian/mandos-client.README: Update Linux documentation link.
  * debian/rules: Completely rewritten to use debhelper v7.
  * initramfs-tools-hook: Bug fix: Make sure the right version of GnuPG is
    copied into the initramfs image. Always assume that GPGME is used to
    avoid searching for it since the path might not be /usr/lib. Thanks
    to Félix Sipma <email address hidden> for the initial bug report,
    and also thanks to Dick Middleton <email address hidden> for some more
    debugging. (Closes: #721903)
  * Fix "bashism in /bin/sh script" fixed by upstream. (Closes: #690639)

 -- Teddy Hogeborn <email address hidden> Sun, 13 Oct 2013 19:03:23 +0200