pure-ftpd-1.0.47-bp150.2.5

- Version update to 1.0.47:
  * If TLS was only enabled on the control channel (-Y 1), the STAT
    command would send its output as other directory listing
    commands, breaking the TLS stream. This has been fixed.
  * The system user “_ftp” can be used as an alternative to “ftp”
    for anonymous sessions.
  * Compatibility with libsodium > 1.0.12 was added (including
    minimal mode).
  * The prefix for Argon2-hashed passwords in LDAP has been changed
    to “{argon2}” (from “{argon2i}”). Ditto for MySQL and
    PostgreSQL: the authentication method is now called “argon2”
    instead of “argon2i”, and includes both Argon2i and Argon2id.
- use https for main site and source download
- switch to bz2 tarball (smaller)

- Version update to 1.0.46:
  * Fix build with openssl-1.1
  * The Perl and Python wrappers are gone
  * TLS v1.0 sessions are now refused
  * Unmaintained contributions have been removed
  * File globbing could take up to `GLOB_TIMEOUT` seconds
    (17 seconds by default) when matching some patterns, no matter what the
    configured recursion level was.
- Refresh patches:
  * pure-ftpd-1.0.20_config.patch
  * pure-ftpd-1.0.20_doc.patch
- Drop patch pure-ftpd-1.0.32-portrange.patch
  * The upstream no longer provide pure-config.pl/py scripts for launching
  * This also means the initscript and service were tweaked to reflect this
- Disable xinetd on systemd having versions where we can stick to socket
  based services instead
  * By default it does not make sense to have this service socket activated
    tho so leave it to user to provide this

- Fix broken pure-ftpd.init script. We cannot use startproc to run
  /usr/sbin/pure-config.pl, because the utility assumes that the
  name of that executable matches the name of the started process,
  which it does not in our case. Furthermore, the start script will
  write a status message to stdout, so we don't have to do it in
  the init script. [bsc#1042690]

- Fix build on SUSE:SLE-11, which doesn't define the RPM variable
  %{_initddir}, so we have to use %{_sysconfdir}/init.d instead.

- pure-ftpd-apparmor.patch: Add an AppArmor profile (based on the
  one from SLE11).
- The Factory version of pure-ftp will replace the older package in
  SLE-11 as per fate#321125. That update brings the following
  changes:
  * These patches have been updated and renamed in the process:
  * pure-ftpd-1.0.22-default_tcp_sedrcv_buffer_size.patch is now
    in pure-ftpd-1.0.32-default_tcp_sedrcv_buffer_size.patch.
  * pure-ftpd-1.0.21-portrange.patch is now in
    pure-ftpd-1.0.32-portrange.patch.
  * pure-ftpd-1.0.32-cap-audit-write.patch is now in
    pure-ftpd-1.0.36-cap-audit-control.patch.
  * These patches are obsolete now and have been removed:
  * 0001-Act-like-a-server-even-in-TLS-mode-when-in-active-mo.patch
  * 0002-Init-a-TLS-data-session-after-having-sent-the-go-ahe.patch
  * 0003-add-opt_a-to-donlist.patch
  * 0004-support-stat-over-tls.patch
  * 0005-speedup-TLS-listing.patch
  * pure-ftpd-1.0.20_config_minuid.patch
  * pure-ftpd-1.0.22-fix-listing-if-directory-has-white-space-in-it.patch
  * pure-ftpd-1.0.22-flush-cmd-after-tls.patch
  * pure-ftpd-1.0.22-oes-bugfix-1.patch
  * pure-ftpd-1.0.22-oes-bugfix-2.patch
  * pure-ftpd-1.0.22-oes-bugfix.patch
  * pure-ftpd-1.0.22-oes-disable-ascii.patch
  * pure-ftpd-1.0.22-oes_remote_server.patch
  * pure-ftpd-1.0.22-wait-on-tls-handshake.patch
  * pure-ftpd-allow-crypto-settings.patch
  * pure-ftpd-remove-gpl-code.patch

- Kill omc xml file useless nowdays
- Version update to 1.0.43:
  * -J switch has been fixed
  * openBSD compat changes
  * Passwords are now hashed using Argon2i, default for puredb accounts now

- fix systemd unit file so the service actually starts (boo#872430)

- Add -fvisibility=hidden for bnc#971980

- Add gpg signature

- Version update to 1.0.42:
  - Compilation fix for OpenBSD and Bitrig when Pure-FTPd is not
    compiled with libsodium.
  - The connection is now dropped if HTTP commands are received.
  - LDAP force_default_gid and force_default_uid now work as documented.
  - The ONLY_ACCEPT_REUSED_SSL_SESSIONS switch (introduced in Pure-FTPd
    1.0.22 circa 2009, but disabled back then due to client compatibility
    concerns) is now on by default, except in broken clients compatibility mode.
  - libmariadb is looked for in addition to libmysqlclient
  - MySQL: my_make_scrambled_password() is not always an exported
    symbol any more, so pure-ftpd now ships a reimplementation.
  - openssl/ec.h is not available on some Linux distributions that
    disable EC in OpenSSL. This is being tested by autoconf.
  - New command-line switch: -2/--certfile= to set the path to the
    certificate file when using TLS.
  - Support for TCP_FASTOPEN added on Linux
  - The LDAP configuration file didn't allow a default gid without also
    defining a default uid. This is no longer the case.
  - OpenBSD's glob() left the glob_t structure uninitialized if the
    pattern was larger than PATH_MAX, causing globfree() to free() an
    unwanted pointer. The bug was introduced in Pure-FTPd 1.0.34.
- Refresh patch:
  * pure-ftpd-1.0.20_config.patch

- Reenable sle11 builds I need for testing.

- Reenable sle11 builds I need for testing.

- Remove all init scripts but keep the rc link working.

- fix bnc#789833: pure-ftpd login failes
  * pure-ftpd-1.0.36-cap-audit-control.patch
- remove oes related patches have never used at openSUSE
  * pure-ftpd-1.0.20-oes_remote_server.patch
  * pure-ftpd-1.0.22-oes-bugfix-534424.patch
- change old PreReq to Requires(pre)
- add version to pureftpd symbol

- Verify GPG signature.

- add gpg signature file for easier verification

- systemd: Do not fork in the background

- spec file: fixed pure-ftpd.service file installation

- update to 1.0.36 :
  - Sync built-in glob(3) code with OpenBSD-current, and remove code we
  don't use instead of ifdef'ing it.
  - Repair checkproc() on Linux when support for capabitilies is
  compiled in. Reported by Eric Gouyer.
  - Don't read /dev/*random every time we need a value. Just use
  arc4random() everywhere and seed it before we possibly chroot().
  - Add support for MFMT, with the same code as SITE UTIME.
  - Support 2-arguments SITE UTIME.
  - LDAP: Add LDAPDefaultHomeDirectory, suggested by Landry Breuil.
  - Add SSL_OP_NO_SSLv3 to SSL options if the list of ciphers is
  prefixed by -S: , needed by Brad.
  - Use more paranoid compiler options whenever possible, and preliminary
  uncluttering of the autoconf script.
  - Try to cache locale-related data at startup after tzset(), rather
  than during a session.
  - Fix quota computation after rename() overwrites an existing file.
  Reported by Hiramoto Koujo, thanks!
  - Improved autoconf detection of -fstack-protector and -fPIE
  - If 10 digits are not enough to print the size of a file in an
  ls-like output, bump the max number of digits to 18. This adds support for
  files up to 1 exabyte.
  - Don't display dot files (except . and ..) if dot_read_ok is 0 in
  donlist() - but not in sglob() yet. This change is purely cosmetic. There are
  many ways to figure out if a file exists.
- document bnc#756306: pure-ftpd umask setting not working properly
  * /etc/pure-ftpd/pure-ftpd.conf contains a note about a side-effect of pam_umask
- add native pure-ftpd.service for systemd-powered systems
- use the same way how to start the daemon in sysvinit script and put
  $remote_fs dependency
  usr/sbin/pure-config.pl /etc/pure-ftpd/pure-ftpd.conf --daemonize

- fix bnc#700611 - pure-ftpd fails with pam
  * pure-ftpd-1.0.32-cap-audit-write.patch