imx-code-signing-tool (4.0.1+dfsg-2ubuntu1) stonking; urgency=medium

  * Fix build with OpenSSL 4 (LP: #2155010)
    - d/p/openssl4-const-correct.patch
    - d/p/disable-engine-without-pkcs11.patch
    - remove package libengine-pkcs11-openssl from recommends
    - d/control - turn of PKCS11 -DCST_WITH_PKCS11=OFF
    - remove d/test hsm-sign which depends upon 
      libengine-pkcs11-openssl 

 -- Ravi Kant Sharma <ravi.kant.sharma@canonical.com>  Mon, 31 Aug 2026 16:45:54 +0200

imx-code-signing-tool (4.0.1+dfsg-2build1) stonking; urgency=medium

  * No-change rebuild against libssl4

 -- Ravi Kant Sharma <ravi.kant.sharma@canonical.com>  Fri, 24 Jul 2026 10:38:44 +0000

imx-code-signing-tool (4.0.1+dfsg-2) unstable; urgency=medium

  * Fix FTBFS with OpenSSL 4.0: use ASN1_STRING accessors
    (Closes: #1138459, LP: #2155010).

 -- Andrej Shadura <andrewsh@debian.org>  Tue, 02 Jun 2026 22:26:35 +0200

imx-code-signing-tool (4.0.1+dfsg-1) unstable; urgency=medium

  [ Tobias Deiminger ]
  * New upstream release. (Closes: #1126001)
  * Switch build system to cmake.
  * Enable the now DFSG compliant HSM backend.
  * Build more tools: hab_log_parser, ahab_signed_message, hab4_pki_tree,
    ahab_split_container, hab4_image_verifier, ahab_image_verifier.
  * Add test for signing with HSM backend.

  [ Tobias Graemer ]
  * Fix blhc CI warnings.
  * Update Build-Depends: pkg-config => pkgconf.
  * Add test dependency on util-linux-extra (needed for newgrp).

 -- Andrej Shadura <andrewsh@debian.org>  Fri, 30 Jan 2026 01:59:31 +0100

imx-code-signing-tool (3.4.1+dfsg-6) unstable; urgency=medium

  * Add manpages.

 -- Andrej Shadura <andrewsh@debian.org>  Wed, 04 Jun 2025 09:09:10 +0200

imx-code-signing-tool (3.4.1+dfsg-5) unstable; urgency=medium

  * Unbreak build on big endian platforms by reusing ntohl instead of from_be32.

 -- Andrej Shadura <andrewsh@debian.org>  Tue, 03 Jun 2025 17:22:04 +0200

imx-code-signing-tool (3.4.1+dfsg-4) unstable; urgency=medium

  * preinst:
    - Verify the source is not already a symlink.
    - Don’t run migrations needlessly.
  * Pass LDFLAGS when building csf_parser.
  * createSRKTable: Remove commented out lines resulting in incorrect shell
    syntax.
  * Enable all hardening options.
  * Standards-Version: 4.7.2.
  * Silence bash warning by depending on bash 4.

 -- Andrej Shadura <andrewsh@debian.org>  Tue, 03 Jun 2025 15:05:18 +0200

imx-code-signing-tool (3.4.1+dfsg-3) unstable; urgency=medium

  * Fix upgrade path from previous versions.

 -- Andrej Shadura <andrewsh@debian.org>  Tue, 03 Jun 2025 13:52:00 +0200

imx-code-signing-tool (3.4.1+dfsg-2) unstable; urgency=medium

  * Move Vcs-* to Salsa.
  * Update standards version to 4.6.2, no changes needed.
  * Set Collabora team as the maintainer.
  * Add missing dependencies for the PKI scripts.

 -- Andrej Shadura <andrewsh@debian.org>  Mon, 02 Jun 2025 15:31:14 +0200

imx-code-signing-tool (3.4.1+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Clean the source during clean stage if Makefile’s still there.
  * Install the new binary mac_dump.
  * Update unbreak-scripts.patch to cover more scripts.
  * Install "ca" directory with openssl configuration.
  * Install scripts into libexec.
  * Add autopkgtests.

 -- Andrej Shadura <andrewsh@debian.org>  Mon, 02 Jun 2025 14:00:25 +0200

imx-code-signing-tool (3.4.0+dfsg-2) unstable; urgency=medium

  * Remove upstream Makefile before running dh_auto_clean.

 -- Andrej Shadura <andrewsh@debian.org>  Thu, 18 Jan 2024 15:48:27 +0100

imx-code-signing-tool (3.4.0+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Adjust paths according to the upstream changes.
  * Update Vcs-Browser to point to the actual branch.
  * Update the copyrights.

 -- Andrej Shadura <andrewsh@debian.org>  Thu, 18 Jan 2024 14:24:18 +0100

imx-code-signing-tool (3.3.2+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Refresh patches:
    - Rebase script fix
    - Drop patches no longer necessary due to upstream changes
  * Add -ldl to LDLIBS just as the upstream does.
  * Update copyrights.

 -- Andrej Shadura <andrewsh@debian.org>  Thu, 12 Oct 2023 22:15:13 +0100

imx-code-signing-tool (3.3.1+dfsg-3) unstable; urgency=medium

  [ Martyn Welch ]
  * Use .o rather than weakened .a.
  * Make err_msg static so we don't get linking errors.

 -- Andrej Shadura <andrewsh@debian.org>  Tue, 20 Jun 2023 18:47:15 +0200

imx-code-signing-tool (3.3.1+dfsg-2) unstable; urgency=medium

  * Unbreak the scripts.
    Thanks to Sean Anderson (patch taken from Arch Linux).

 -- Andrej Shadura <andrewsh@debian.org>  Thu, 12 Aug 2021 16:02:12 +0200

imx-code-signing-tool (3.3.1+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Drop patches applied upstream.
  * Update the copyrights.

 -- Andrej Shadura <andrewsh@debian.org>  Thu, 12 Aug 2021 15:10:25 +0200

imx-code-signing-tool (3.3.0+dfsg2-1) unstable; urgency=medium

  * Remove the questionably licensed and unused HSM backend
    (Closes: #985763).
  * Refresh patches.
  * Bump debhelper from old 12 to 13.
  * Remove unused license definitions.
  * Use execute_after_ instead of override_.
  * Update gbp.conf and Vcs-*.

 -- Andrej Shadura <andrewsh@debian.org>  Tue, 23 Mar 2021 09:54:12 +0100

imx-code-signing-tool (3.3.0+dfsg-2) unstable; urgency=medium

  * Update the patch to fix more issues of the kind.
    Thanks to Peter Senna Tschudin <peter.senna@collabora.com>.
  * Add Vcs-*.
  * Add debian/gbp.conf.

 -- Andrej Shadura <andrewsh@debian.org>  Mon, 03 Feb 2020 22:11:09 +0100

imx-code-signing-tool (3.3.0+dfsg-1) unstable; urgency=low

  * Initial release (Closes: #950017).

 -- Andrej Shadura <andrewsh@debian.org>  Tue, 28 Jan 2020 12:51:44 +0100
