crypto-policies (20251128.git19878fe-0ubuntu5) stonking; urgency=medium

  [ Andreas Hasenack ]
  * Fix FTBFS and autopkgtest errors due to openssh-gssapi split
    (LP: #2169064):
    - d/t/control: update openssh test dependencies to use the gssapi
      variant of the packages
    - d/control: build-depend on the gssapi variants of the openssh
      package, due to build-time tests that expect openssh to support
      GSSAPI options
    - d/t/openssh: match keywords with the exact case printed by
      "sshd -T", which switched to mixed case in later versions, and
      simplify the expression to use just one sed call

  [ Finn Rayk Gartner ]
  * d/t/test-upstream: Create the /run/sshd directory before running test suite
    (LP: #2169024)

 -- Finn Rayk Gartner <finn.gartner@canonical.com>  Wed, 30 Sep 2026 22:49:52 +0200

crypto-policies (20251128.git19878fe-0ubuntu4) resolute; urgency=medium

  * Fix s390x specific failure on test-openssh autopkgtest (LP: #2145919):
    - d/t/openssh/test_openssh__ciphers__updated_on_policy_change.bats
      + Change shared top-level cipher variables to function local. This
        prevents an issue where sshd had not been properly initialized and
        failed before the tests ran as the variables were initialized before
        /run/sshd was created.
      + Refactor tests for clarity.
      + Create /run/sshd in get_ssh_server_ciphers. This solves an occcasional
        issue where updating the current policy made /run/sshd disappear on
        the Launchapd infra runners.
    - d/tests/openssh/shared: Install /run/sshd in setup() instead of
      setup_file(). This fixes a timing issue where sshd would run before
      /run/sshd got created.

 -- Simon Johnsson <simon.johnsson@canonical.com>  Tue, 24 Mar 2026 09:37:47 +0100

crypto-policies (20251128.git19878fe-0ubuntu3) resolute; urgency=medium

  * Fix failing test-openssh autopkgtest (LP: #2143545):
    - d/tests/openssh/shared: Install the /run/sshd directory on startup.
      This helps fix an error where openssh complained about a missing
      privilege separation directory, which caused the test to fail.
    - d/tests/test-openssh: Filter out the error "Missing privilege separation
      directory: /run/sshd" from the test output. This is a workaround to
      prevent the test from failing due to this stderr, which may occur
      erroneously in certain environments.

 -- Simon Johnsson <simon.johnsson@canonical.com>  Fri, 06 Mar 2026 15:03:02 +0100

crypto-policies (20251128.git19878fe-0ubuntu2) resolute; urgency=medium

  * Update control to specify Architectures as "all"
  * Restructure patches for separation of concern

 -- Simon Johnsson <simon.johnsson@canonical.com>  Wed, 25 Feb 2026 09:59:12 +0100

crypto-policies (20251128.git19878fe-0ubuntu1) resolute; urgency=medium

  * Initial release. (LP: #2138940)
  * Import 20251128.git19878fe from upstream

 -- Simon Johnsson <simon.johnsson@canonical.com>  Wed, 28 Jan 2026 12:27:09 +0100
