X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=dsa-nagios-checks%2Fdebian%2Fchangelog;h=9914100f8b39c7a5d14653ab98252f4252912beb;hb=e69f77d06c86c5aad6ad96e5ccc77bfa5cf72ec0;hp=143420f6de058cb04c5db979b3ab17c865456e5e;hpb=0c98805e2a7a20c045fb7212e352fcab4c4e26dd;p=mirror%2Fdsa-nagios.git

diff --git a/dsa-nagios-checks/debian/changelog b/dsa-nagios-checks/debian/changelog
index 143420f..9914100 100644
--- a/dsa-nagios-checks/debian/changelog
+++ b/dsa-nagios-checks/debian/changelog
@@ -3,6 +3,22 @@ dsa-nagios-checks (96) UNRELEASED; urgency=low
   * dsa-check-zone-rrsig-expiration, dsa-check-zone-rrsig-expiration-many:
     Allow supplying the nameservers to start recursion at (per zone).
     This is useful for reverse zones of RFC1918 space.
+  * dsa-check-bacula: exit status fix.
+  * dsa-check-hpacucli:
+    - support filtering controllers.
+    - add an option to accept no-controllers as an OK state.
+  * remove weak keys check
+  * dsa-check-dnssec-delegation
+    - handle zones with no keys that have the SEP bit.
+    - warn on all domains where parent has a non-empty DS bit that does
+      not match ours, even if we did not expect it to have one at all.
+  * dsa-check-zone-rrsig-expiration-many:
+    - expect dnssec by default now.
+  * dsa-check-zone-rrsig-expiration:
+    - in the OK message, clarify we only check sigs at the zone apex.
+  * dsa-check-dnssec-delegation:
+    - accept any ds/dnskey combination whose intersection is not empty.
+      (previously we required them to match exactly.)
 
  -- Peter Palfrader <weasel@debian.org>  Tue, 23 Apr 2013 20:12:09 +0200