+tripe (1.5.3) experimental; urgency=medium
+
+ * tripe-peer-services (tripe-newpeers): Fix crash when the database
+ contains `user' records.
+
+ -- Mark Wooding <mdw@distorted.org.uk> Mon, 23 Sep 2019 11:10:20 +0100
+
+tripe (1.5.2) experimental; urgency=medium
+
+ * tripe-wireshark: Dissector package is necessarily architecture
+ specific. Replace botched architecture-neutral version.
+
+ -- Mark Wooding <mdw@distorted.org.uk> Sun, 22 Sep 2019 16:22:19 +0100
+
+tripe (1.5.1) experimental; urgency=medium
+
+ * tripe: Fix almost completely unusable AEAD support (brown paper bag
+ moment).
+ * tripe: Document the errors about unsuitable AEAD schemes.
+ * tripe: Support AEAD schemes with smaller nonce spaces (down to 40
+ bits).
+
+ -- Mark Wooding <mdw@distorted.org.uk> Sun, 22 Sep 2019 14:52:48 +0100
+
+tripe (1.5.0) experimental; urgency=medium
+
+ * Big version bump, because this really isn't a prerelease anymore. And
+ there's lots of goodies in this version.
+ * New mobile-peer protocol `knock' is much faster and no longer requires
+ complex SSH setup.
+ * Support transport over IPv6.
+ * Support Catacomb AEAD schemes for bulk crypto.
+ * python-tripe: Fixed `TripeCommandDispatcher.eping' to send the correct
+ command.
+ * tripe-peer-services (connect): Report on connectivity statistics.
+ * tripe-wireshark: Replaced the old dissector with a new one written in
+ Lua, which understands the modern protocol. It's unfortunately
+ slower, but actually works and isn't a nightmare to maintain.
+ * tripe-ethereal: Deleted this ancient transition package.
+
+ -- Mark Wooding <mdw@distorted.org.uk> Sun, 22 Sep 2019 01:49:03 +0100
+
+tripe (1.0.0pre19.1) experimental; urgency=medium
+
+ * Packaging fixes. (No code change.)
+
+ -- Mark Wooding <mdw@distorted.org.uk> Mon, 24 Dec 2018 15:53:35 +0000
+
+tripe (1.0.0pre19) experimental; urgency=low
+
+ * tripe: Use Catacomb `rand_quick' to collect system-specific entropy,
+ e.g., from the x86 `rdrand' isntruction.
+ * tripe: Fix memory leak of key-data objects.
+ * tripe: Add new `naclbox' bulk-crypto transform based on Salsa20/ChaCha
+ and Poly1305.
+ * tripe: Support X25519 and X448 as key-exchange groups.
+ * tripe-keys: Support Ed25519 and Ed448 signature schemes.
+ * tripe-keys: Allow more control over key generation. In particular,
+ arbitrary attributes can now be set on master keys and key-exchange
+ keys.
+ * tripe-uslip: Clean up sockets on signal.
+ * A number of documentation fixes.
+
+ -- Mark Wooding <mdw@distorted.org.uk> Sun, 14 May 2017 18:18:17 +0100
+
+tripe (1.0.0pre18) experimental; urgency=low
+
+ * general: Fixed some 64-bit portability bugs.
+ * debian: Improve the Debian packaging: there are now explicit versions
+ on dependencies; the build-depependencies are correct; and there are
+ separate build-dependencies for the (rather more demanding)
+ architecture-neutral packages.
+ * tests: Fixed the server test suite to remove spurious failures.
+
+ -- Mark Wooding <mdw@distorted.org.uk> Sat, 30 Apr 2016 18:13:31 +0100
+
+tripe (1.0.0pre17.1) experimental; urgency=low
+
+ * tests: More warning suppressions.
+
+ -- Mark Wooding <mdw@distorted.org.uk> Mon, 11 May 2015 00:52:01 +0100
+
+tripe (1.0.0pre17) experimental; urgency=low
+
+ * tripe-peer-services: The `tripe-newpeers' program now implements
+ multiple inheritance of configuration sections. See peers.in(5) for
+ the details.
+ * tripe-peer-services: The base configuration now has different timeouts
+ for active and passive dynamic peers. The thinking behind this is
+ explained in connect(8).
+ * tripe: The example `knock' script now works with OpenSSH forced-
+ commands, as well as custom shells.
+ * tripe: Include a configuration file for `sshsvc-mkauthkeys', to help
+ with setting up passive peers.
+ * tripe-peer-services: Fix a bug which broke the `connect' service's
+ `KICK' command.
+ * Attach a `tripe' suffix to most of the manpage names. Some of the
+ services, in particular, have rather generic names and it's only luck
+ that there haven't been conflicts yet.
+ * tripe: New `-W' option for `tripectl' to set the watch list.
+
+ -- Mark Wooding <mdw@distorted.org.uk> Fri, 08 May 2015 19:22:25 +0100
+
+tripe (1.0.0pre16.2) experimental; urgency=low
+
+ * tripe-peer-services: `tripe-ifup' is now more tolerant of errors, and
+ more useful at reporting them.
+ * tripe-peer-services: `tripe-ifup' strips any explicit prefix length
+ from the remote internal address when adding routes naming it as a
+ gateway.
+ * tripe-peer-services: `tripe-ifup' explicitly forces the sysctl setting
+ `net.ipv6.conf.IFACE.disable_ipv6' off before configuring an IPv6
+ address as a workaround for some devices which try to turn IPv6 off
+ globally if they can't get a route.
+
+ -- Mark Wooding <mdw@distorted.org.uk> Sat, 14 Mar 2015 19:35:18 +0000
+
+tripe (1.0.0pre16.1) experimental; urgency=low
+
+ * tripe: Diagnose a mismatch between two peers' choice of bulk crypto
+ transforms.
+
+ -- Mark Wooding <mdw@distorted.org.uk> Tue, 17 Feb 2015 21:33:47 +0000
+
tripe (1.0.0pre16) experimental; urgency=low
* pathmtu: Use `IP_PMTUDISC_PROBE' rather than `..._DO' when doing
~mdw / tripe / blobdiff