libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.22) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * build with dh_apache2 --noscripts, so the package no longer ships a
    postinst that runs "apache2_invoke enmod rpaf". On a saltweb host that
    call always failed: saltweb manages apache modules through its own
    modules-load/ and modules-conf/ directories and declares
    /etc/apache2/mods-available purged, recursive and forced, holding only
    UNUSED_JUST_FOR_APT_INSTALL, so the rpaf.load this package ships there is
    deleted again and a2enmod cannot find the module. The postinst exited 1
    and left the package half-configured, which blocks every later apt
    operation on that host until someone clears it by hand.
    The module is unaffected: saltweb loads it through its own
    modules-load/rpaf.load. On a stock Debian host it now has to be enabled
    with a2enmod rpaf, which is the right trade for a package only we install.
    The upgrade path is safe - dh_apache2's prerm only runs dismod on remove
    and deconfigure, not on upgrade, so upgrading from .20 or .21 runs no
    maintainer script that can fail.

 -- Matthias Hörmann <mhoermann@saltation.de>  Tue, 01 Sep 2026 13:10:00 +0200

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.21) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * add RPAF_EnableForwarded to maintain the RFC 7239 Forwarded request header
    next to the existing X-Forwarded-* headers: replaced by our own element for
    requests that are not from a trusted RPAF_ProxyIPs, appended to for requests
    that are
  * add RPAF_SanitizeHeaders to strip request headers a reverse proxy may set
    but a client must not be able to inject, early enough that mod_setenvif
    rules based on them can no longer be fooled
  * add test/, a podman harness that diffs the behaviour matrix of a build
    against the previous revision
  * point Vcs-Git and Vcs-Browser at our own fork instead of the git.debian.org
    collab-maint repository, which has not existed since alioth was retired
  * declare Standards-Version 4.3.0 rather than 3.9.6. Nothing in the package
    needed changing for it, the field was simply never updated after the wheezy
    era. Both this and the Vcs fields are lintian warnings and the source
    package job runs lintian --fail-on-warnings, so they broke the build the
    first time it ran since 2021, unrelated to the changes above.

 -- Matthias Hörmann <mhoermann@saltation.de>  Mon, 31 Aug 2026 15:56:46 +0200

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.20) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * remove old lintian override that makes lintian throw an error on bullseye

 -- Matthias Hörmann <mhoermann@saltation.de>  Tue, 17 Aug 2021 15:13:02 +0200

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.19) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * use connection note instead of request note to avoid loss of X_REQUEST_ID
    in case mod_rewrite uses sub-requests

 -- Matthias Hörmann <mhoermann@saltation.de>  Wed, 30 Dec 2020 11:16:02 +0200

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.18) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * restore X_REQUEST_ID if it is lost due to mod_rewrite
  * use RPAF_RequestIdHeader on outgoing header instead of the hardcoded
    X-Request-Id

 -- Matthias Hörmann <mhoermann@saltation.de>  Wed, 30 Dec 2020 11:00:02 +0200

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.17) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * move X-Request-Id logic before various early returns (but still after
    trusted proxy check), this should fix missing request id if a trusted
    proxy sends no X-Forwarded-For header or one with no IPs other than its own

 -- Matthias Hörmann <mhoermann@saltation.de>  Tue, 29 Dec 2020 10:38:02 +0200

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.16) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * fix copy&paste error (header_port was retrieved instead of
    header_request_id)

 -- Matthias Hörmann <mhoermann@saltation.de>  Mon, 28 Dec 2020 17:02:02 +0200

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.15) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * add handling for X-Request-Id header

 -- Matthias Hörmann <mhoermann@saltation.de>  Mon, 28 Dec 2020 16:46:02 +0200

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.14) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * fix allocation of strings assigned to r->server->server_scheme, should not
    be allocated from request pool

 -- Matthias Hörmann <mhoermann@saltation.de>  Tue, 04 Feb 2020 10:51:02 +0200

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.13) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * change hook from APR_HOOK_FIRST to APR_HOOK_REALLY_FIRST to run before
    mod_security2

 -- Matthias Hörmann <mhoermann@saltation.de>  Thu, 26 Sep 2019 14:41:02 +0200

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.12) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * restore setting of r->server->server_scheme since not setting it breaks
    things (see comments in code). This does not solve the race condition

 -- Matthias Hörmann <mhoermann@saltation.de>  Fri, 13 Apr 2018 14:34:02 +0100

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.11) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * do not hook http_scheme and default_port, that seems to break something
    rather badly

 -- Matthias Hörmann <mhoermann@saltation.de>  Thu, 12 Apr 2018 17:47:02 +0100

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.10) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * fixes to scheme handling

 -- Matthias Hörmann <mhoermann@saltation.de>  Thu, 12 Apr 2018 17:35:02 +0100

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.9) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * fix superfluous colon in r->parsed_uri.port_str
  * do not update Host header after setting port

 -- Matthias Hörmann <mhoermann@saltation.de>  Thu, 12 Apr 2018 16:39:02 +0100

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.8) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * handle r->useragent_host absence before 2.4.19
  * fix date in debian changelog

 -- Matthias Hörmann <mhoermann@saltation.de>  Thu, 12 Apr 2018 13:11:02 +0100

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.7) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * do not set client_ip or client_addr
  * do not set server port
  * do not set server scheme
  * set parsed_uri scheme
  * set useragent_host
  * do not process mod_proxy requests (analogous to mod_remoteip)
  * add documentation to source code about the C to log, C to variable,...
    mappings

 -- Matthias Hörmann <mhoermann@saltation.de>  Thu, 12 Apr 2018 11:34:02 +0100

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.5) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * set useragent_ip instead of client_ip
  * set parseduri values instead of server values

 -- Matthias Hörmann <mhoermann@saltation.de>  Wed, 11 Apr 2018 11:03:02 +0100

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.4) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * support X-Forwarded-Protocol
  * do not set HTTPS,... at all if headers indicate HTTPS is off

 -- Matthias Hörmann <mhoermann@saltation.de>  Tue, 24 Feb 2015 10:49:02 +0100

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.3) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * Fix in last fix

 -- Matthias Hörmann <mhoermann@saltation.de>  Wed, 01 Oct 2014 10:30:16 +0200

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.2) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * Fixed behavior for X-Forwarded-HTTPS: off

 -- Matthias Hörmann <mhoermann@saltation.de>  Wed, 01 Oct 2014 10:05:34 +0200

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.1) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * use https://github.com/meulop/mod_rpaf/tree/master with per request fix

 -- Matthias Hörmann <mhoermann@saltation.de>  Mon, 29 Sep 2014 14:01:10 +0200

libapache2-mod-rpaf (0.8.4-1+wheezy1~saltation.0) UNRELEASED; urgency=medium

  * Non-maintainer upload.
  * https://raw.githubusercontent.com/gnif/mod_rpaf/stable/mod_rpaf.c
  * RPAF_SetHTTPS support

 -- Matthias Hörmann <mhoermann@saltation.de>  Fri, 26 Sep 2014 13:43:21 +0200

libapache2-mod-rpaf (0.6-7+wheezy1) stable; urgency=low

  * Restore 030_ipv6.patch, removed by QA upload in 0.6-1 (Closes: #726529)

 -- Sergey B Kirpichev <skirpichev@gmail.com>  Mon, 20 Jan 2014 17:56:07 +0400

libapache2-mod-rpaf (0.6-7) unstable; urgency=low

  * Fix FTBS on a number of archs: add -D_LARGEFILE64_SOURCE to CFLAGS

 -- Sergey B Kirpichev <skirpichev@gmail.com>  Thu, 21 Jun 2012 11:35:07 +0400

libapache2-mod-rpaf (0.6-6) unstable; urgency=low

  * Pass hardening CFLAGS/CPPFLAGS to apxs2
  * Add VCS-* fields

 -- Sergey B Kirpichev <skirpichev@gmail.com>  Fri, 15 Jun 2012 16:25:03 +0400

libapache2-mod-rpaf (0.6-5) unstable; urgency=low

  * Reformat debian/copyright according to accepted DEP5 spec
  * Bump up Standards-Version to 3.9.3 (no changes)
  * Renamed: debian/docs -> debian/libapache2-mod-rpaf.docs
  * Update deprecation warning
  * Change dh compat to 9, enable hardening support

 -- Sergey B Kirpichev <skirpichev@gmail.com>  Fri, 01 Jun 2012 15:40:41 +0400

libapache2-mod-rpaf (0.6-3) unstable; urgency=low

  * Fixed module naming stuff in rpaf.conf (Thanks to Alexander
    Kuznetsov).  Closes: #653330.
  * Reformat rpaf.conf, add some commentaries from README.Debian
  * Add deprecation warning in README.Debian
  * Move debian/conf/* to debian/
  * Add newline at the end of postinst
  * Delete unneded debian/dirs file
  * Override dh_auto_install
  * Update version in debian/watch

 -- Sergey B Kirpichev <skirpichev@gmail.com>  Wed, 07 Dec 2011 16:32:54 +0400

libapache2-mod-rpaf (0.6-2) unstable; urgency=low

  * New maintainer (Closes: #636732)
  * Use DEP5 debian/copyright format
  * Removed override for dh_auto_install (used debian/install file)
  * Cleanup override_dh_auto_clean and override_dh_auto_build
  * Set section for the package to httpd

 -- Sergey B Kirpichev <skirpichev@gmail.com>  Fri, 07 Oct 2011 21:48:54 +0400

libapache2-mod-rpaf (0.6-1) unstable; urgency=low

  * QA upload.
  * New upstream release. (Closes: #468460)
    + You can now set the header to parse for the real IP. (Closes: #386630)
    + Move change_remote_ip handler to APR_HOOK_FIRST. (Closes: #386628)
  * Remove all old patches.
  * Change Maintainer to QA, thanks to Piotr Roszatycki for maintaining
    this package in the past.
  * Replace debian/rules with a dh version and some overrides. (Closes: #636893)
  * Remove non working Vcs-* entries from debian/control.
  * Build-Depend on debhelper and apache2-threaded-dev instead of yada.
  * Add a debian/compat 8 file.
  * Add source/format 3.0 quilt.
  * Add ${shlibs:Depends}, ${misc:Depends}, apache2 | apache2-mpm to Depends.
  * Remove ${libapache2-mod-rpaf:Depends} from Depends.
  * Add debian/dirs to create the installation directory.
  * Add a regular debian/copyright file.
  * Add postinst and prerm scripts to enable/disable the module.
  * Increase Standards-Version to 3.9.2 - no changes required beside
    the reworking of the package.
  * Add information about RPAFheader to README.Debian.
  * Add ::1 to RPAFproxy_ips in the default configuration.

 -- Sven Hoexter <hoexter@debian.org>  Sun, 04 Sep 2011 18:11:18 +0200

libapache2-mod-rpaf (0.5-3) unstable; urgency=low

  * Rename source package name from libapache-mod-rpaf to libapache2-mod-rpaf.
  * Dropped Apache 1.3 support. Closes: #429131.
  * Resolved problem with keepalive requests. Closes: #345648.
  * Support for IPv6-enabled webservers. Closes: #409521, #414450.
  * Support for multiple hostnames in X-Forwarded-Host header. Closes: #416387.
  * Get last address in the header which is not in RPAFproxy_ips. Closes: #377190.

 -- Piotr Roszatycki <dexter@debian.org>  Tue, 30 Oct 2007 13:38:58 +0100

libapache-mod-rpaf (0.5-2.1) unstable; urgency=low

  * Non-maintainer upload to update dependency on an uninstallable package.
  * Updated the dependency of libapache2-mod-suphp to apache2.2-common.
    (Closes: #391753)
  * Added a call to apr-1-config --cppflags to get the correct CFLAGS at 
    build time.

 -- Margarita Manterola <marga@debian.org>  Wed, 18 Oct 2006 14:20:31 -0300

libapache-mod-rpaf (0.5-2) unstable; urgency=low

  * Add rpaf.conf with base configuration.

 -- Piotr Roszatycki <dexter@debian.org>  Wed, 16 Mar 2005 11:08:47 +0100

libapache-mod-rpaf (0.5-1) unstable; urgency=low

  * New upstream release.
  * New libapache2-mod-rpaf binary package.
  * This version fixes bug with incorrect log entries. Closes: #262050.
  * Fixed typo in package description. Closes: #268519, #277225.

 -- Piotr Roszatycki <dexter@debian.org>  Mon, 28 Feb 2005 11:02:21 +0100

libapache-mod-rpaf (0.4-1) unstable; urgency=low

  * New upstream release.
  * Fixed Origin field in debian/control, closes: #154412

 -- Piotr Roszatycki <dexter@debian.org>  Tue, 19 Aug 2003 17:35:38 +0200

libapache-mod-rpaf (0.3-2) unstable; urgency=low

  * Safe postinst script.
  * Fixes minor spelling error, closes: #124888

 -- Piotr Roszatycki <dexter@debian.org>  Thu, 11 Apr 2002 11:37:47 +0200

libapache-mod-rpaf (0.3-1) unstable; urgency=high

  * New upstream release
  * Fixes bug with memory leaking

 -- Piotr Roszatycki <dexter@debian.org>  Fri,  5 Oct 2001 07:20:39 +0000

libapache-mod-rpaf (0.2-1) unstable; urgency=low

  * New upstream release

 -- Piotr Roszatycki <dexter@debian.org>  Tue,  2 Oct 2001 13:35:37 +0000

libapache-mod-rpaf (0.1-1) unstable; urgency=low

  * Initial Debian version.

 -- Piotr Roszatycki <dexter@debian.org>  Thu, 30 Aug 2001 16:49:42 +0200

