2.8.3 2013/05/04

        Log something when refusing to sign because the private key was too
                small.  This also adds a new "On-SignatureError" handler
                setting, and a new status code DKIM_STAT_SIGGEN.
        Fix application of "On-InternalError" setting.
        Feature request #SF3609496: Don't apply reputation checks to internal
                clients.

2.8.2           2013/03/27
        Authentication-Results tokens should be checked without case
                sensitivity.
        Fix snprintf() arguments in dkimf_checkfsnode().
        CONTRIB: Patch #SF3608716: Fixes to spec/opendkim.spec.in

2.8.1           2013/03/19
        Fix bug #SF3607071: Report the reason why a key file is determined
                to be unsafe.
        Fix bug #SF3607072: When checking for key file safety, take any
                "-u" value provided on the command line into account.
        Fix bug #SF3608401: Solaris 10 doesn't have strsep().
        BUILD: Fix build for versions of libdb between 3.1 and 4.6.

2.8.0           2013/02/25
        Feature request #SF2964383: Add DKIM_LIBFLAGS_STRICTRESIGN, which
                inhibits signing of a handle tagged for resigning when the
                attached verifying handle had no valid signatures in it.
        Feature request #SF3155117: Do a more thorough check for writeable
                key files, checking more of the filesystem permission tree.
        Feature request #SF3530734: Add "LDAPDisableCache", which suppresses
                the creation of a local cache in front of LDAP queries.
        Feature request #SF3547359: If compiled with libcurl, add "SMTPURI"
                configuration option that allows direct SMTP transmission
                failure reports.
        Feature request #SF3578197: Allow per-message override of the list of
                header fields to be signed.
        Feature request #SF3590860: Combine collected reputation values into
                an overall allowed rate under _FFR_REPRRD, as is done for the
                other reputation code.
        Feature request #SF3598991: Add odkim.signfor() function to the Lua
                setup script.
        Feature request #SF3599409: Modify dkimf_checkip() to try surrounding
                the IP address part of every query with square brackets, which
                is a common way to do IP address literals in email contexts.
        Fix bug #SF3531477: Add (hopefully temporary) configuration option
                "DisableCryptoInit" so that opendkim's initialization of the
                crypto library doesn't conflict with the same work done by
                other libraries.
        Fix bug #SF3599901: Rename "InsecureKey" to "UnprotectedKey" and
                "InsecurePolicy" to "UnprotectedPolicy", as the term "insecure"
                in reference to a key is sometimes interpreted to mean "not
                enough random bits" rather than as a keyword describing the
                presence or absence of DNSSEC protection.  What's logged in
                Authentication-Results header fields has been similarly
                modified.
        Fix bug #SF3604525: Don't divide by zero when the query cache hasn't
                been used.
        Protect against handling of signatures with empty domains, which could
                cause a NULL dereference and a crash.
        Do ATPS checks when enabled even if ADSP is disabled.
        Don't fail to start on empty or null configuration files.
        Patch #SF3593422: Update for MDB 0.9.5 support.
        LIBOPENDKIM: Fix header canonicalization when DKIM_LIBFLAG_FIXCRLF is
                used in combination with dkim_chunk().
        LIBOPENDKIM: Enable dkim_getcachestats() and the underlying function
                to extract the current number of keys in the cache, and also
                provide a counter reset mechanism.
        BUILD: Feature request #SF3547151: Check for Lua package name variants
                in use on Debian.
        BUILD: Feature request #SF3599902: Change OpenSSL existence test
                to help with Debian packaging.
        BUILD: Add "--with-test-socket" to force all of the filter unit tests
                to use a specific socket.
        BUILD: Add checks for strlcat()/strlcpy() in libbsd.
        CONTRIB: Fix bug #SF3575666: Pass pid file path to killproc.
        CONTRIB: Add systemd directory.
        CONTRIB: Split out initial key generation function from
                contrib/init/redhat/opendkim.
        MILTERTEST: Don't crash in mt_connect() if the socketspec doesn't
                contain a colon.
        MILTERTEST: When connect() fails for an AF_INET socket, it apparently
                leaves the socket unusable.  Discard the socket when that
                happens and get a new one.
        MILTERTEST: Add a way to extend the mt.connect() retry interval via
                environment variables so a large test suite can be easily
                extended on slow systems.
        TOOLS: Register DNS functions before calling dkim_dns_init() in
                opendkim-testkey.
        TOOLS: Add "-K" (keep temporary files) flag for opendkim-testmsg

3 files changed, 18 insertions, 8 deletions

diff --git a/mail/opendkim/Makefile b/mail/opendkim/Makefile
index 8a99a6a9674..df54c02051c 100644
--- a/mail/opendkim/Makefile
+++ b/mail/opendkim/Makefile
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.13 2013/05/31 12:41:15 wiz Exp $
+# $NetBSD: Makefile,v 1.14 2013/06/15 19:03:31 pettai Exp $
 
-DISTNAME=	opendkim-2.7.4
-PKGREVISION=	1
+DISTNAME=	opendkim-2.8.3
 CATEGORIES=	mail
 MASTER_SITES=	${MASTER_SITE_SOURCEFORGE:=opendkim/}
 
diff --git a/mail/opendkim/PLIST b/mail/opendkim/PLIST
index f5299195657..4ee539bbb58 100644
--- a/mail/opendkim/PLIST
+++ b/mail/opendkim/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.8 2013/01/05 17:05:07 pettai Exp $
+@comment $NetBSD: PLIST,v 1.9 2013/06/15 19:03:31 pettai Exp $
 include/opendkim/dkim.h
 lib/libopendkim.la
 lib/pkgconfig/opendkim.pc
@@ -32,6 +32,8 @@ share/doc/opendkim/dkim.html
 share/doc/opendkim/dkim_add_querymethod.html
 share/doc/opendkim/dkim_add_xtag.html
 share/doc/opendkim/dkim_alg_t.html
+share/doc/opendkim/dkim_atps_check.html
+share/doc/opendkim/dkim_atps_t.html
 share/doc/opendkim/dkim_body.html
 share/doc/opendkim/dkim_canon_t.html
 share/doc/opendkim/dkim_cbstat.html
@@ -76,6 +78,7 @@ share/doc/opendkim/dkim_getsighdr.html
 share/doc/opendkim/dkim_getsighdr_d.html
 share/doc/opendkim/dkim_getsiglist.html
 share/doc/opendkim/dkim_getsignature.html
+share/doc/opendkim/dkim_getsslbuf.html
 share/doc/opendkim/dkim_getuser.html
 share/doc/opendkim/dkim_header.html
 share/doc/opendkim/dkim_init.html
@@ -114,6 +117,7 @@ share/doc/opendkim/dkim_set_signature_handle.html
 share/doc/opendkim/dkim_set_signature_handle_free.html
 share/doc/opendkim/dkim_set_signature_tagvalues.html
 share/doc/opendkim/dkim_set_signer.html
+share/doc/opendkim/dkim_set_trust_anchor.html
 share/doc/opendkim/dkim_set_user_context.html
 share/doc/opendkim/dkim_setpartial.html
 share/doc/opendkim/dkim_sig_getbh.html
@@ -125,6 +129,7 @@ share/doc/opendkim/dkim_sig_getdomain.html
 share/doc/opendkim/dkim_sig_geterror.html
 share/doc/opendkim/dkim_sig_geterrorstr.html
 share/doc/opendkim/dkim_sig_getflags.html
+share/doc/opendkim/dkim_sig_gethashes.html
 share/doc/opendkim/dkim_sig_getidentity.html
 share/doc/opendkim/dkim_sig_getkeysize.html
 share/doc/opendkim/dkim_sig_getqueries.html
@@ -133,15 +138,18 @@ share/doc/opendkim/dkim_sig_getselector.html
 share/doc/opendkim/dkim_sig_getsignalg.html
 share/doc/opendkim/dkim_sig_getsignedhdrs.html
 share/doc/opendkim/dkim_sig_getsigntime.html
+share/doc/opendkim/dkim_sig_getsslbuf.html
 share/doc/opendkim/dkim_sig_gettagvalue.html
 share/doc/opendkim/dkim_sig_hdrsigned.html
 share/doc/opendkim/dkim_sig_ignore.html
 share/doc/opendkim/dkim_sig_process.html
+share/doc/opendkim/dkim_sig_seterror.html
 share/doc/opendkim/dkim_sig_syntax.html
 share/doc/opendkim/dkim_sigerror.html
 share/doc/opendkim/dkim_siginfo.html
 share/doc/opendkim/dkim_sigkey_t.html
 share/doc/opendkim/dkim_sign.html
+share/doc/opendkim/dkim_signhdrs.html
 share/doc/opendkim/dkim_ssl_version.html
 share/doc/opendkim/dkim_stat.html
 share/doc/opendkim/dkim_verify.html
@@ -149,6 +157,7 @@ share/doc/opendkim/dns.html
 share/doc/opendkim/example.com.ldif
 share/doc/opendkim/index.html
 share/doc/opendkim/opendkim
+share/doc/opendkim/opendkim-default-keygen
 share/doc/opendkim/opendkim-fixipaddrs.pl
 share/doc/opendkim/opendkim-spam-ignore-cmdswitch.patch
 share/doc/opendkim/opendkim.conf.sample
@@ -156,8 +165,10 @@ share/doc/opendkim/opendkim.conf.simple
 share/doc/opendkim/opendkim.conf.simple-verify
 share/doc/opendkim/opendkim.ldif
 share/doc/opendkim/opendkim.schema
+share/doc/opendkim/opendkim.service
 share/doc/opendkim/opendkim.spec.in
 share/doc/opendkim/opendkim.xml
 share/doc/opendkim/overview.html
 share/doc/opendkim/stats.lua
+share/examples/opendkim/opendkim.conf.sample
 share/examples/rc.d/opendkim
diff --git a/mail/opendkim/distinfo b/mail/opendkim/distinfo
index 0be3a4c2d9d..7b4c11eaf55 100644
--- a/mail/opendkim/distinfo
+++ b/mail/opendkim/distinfo
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.10 2013/03/16 00:07:03 pettai Exp $
+$NetBSD: distinfo,v 1.11 2013/06/15 19:03:31 pettai Exp $
 
-SHA1 (opendkim-2.7.4.tar.gz) = e21218d1da441c9a97bd65a566dc33dd3a331609
-RMD160 (opendkim-2.7.4.tar.gz) = d9bb2ea541cb2977cfffde102152c89332ed297d
-Size (opendkim-2.7.4.tar.gz) = 1158496 bytes
+SHA1 (opendkim-2.8.3.tar.gz) = ea7226a5f36ab466b0089bee92d40beebc7b1e75
+RMD160 (opendkim-2.8.3.tar.gz) = ef10811609daea4e255ca2201fe723c12c79c0b9
+Size (opendkim-2.8.3.tar.gz) = 1182214 bytes
 SHA1 (patch-configure) = 8e635d41c213f899b31b392b1cdb96c8d5113ca4