Log message:
corrected the patchsum

Log message:
Drop PKG_DESTDIR_SUPPORT setting, "user-destdir" is default these days.

Log message:
2.5.2           2012/04/09
        Fix bug #SF3496208: Replace stats/opendkim-genstats with a perl
                script so it's far more efficient.
        Fix bug #SF3514793: Pass proper flags to libdb when creating
                temporary LDAP caches.  Problem noted by Sergey Romanov.
        Fix a crash bug when using LocalADSP with a message with no
                parseable From: field.  Problem noted by John Merriam.
        Fix a crash bug when using LDAP with authentication when LDAPAuthUser
                is not defined.
        STATS: Fix bug #SF3510729: Convert stats/opendkim-gengraphs to a perl
                script.

2.5.1           2012/03/15
        Fix bug #SF3496131: Fix query cache build problem.
        Fix bug #SF3500660: Add Date: header field to generated reports.
        BUILD: A few subsidiary libraries need to know about -lresolv on
                systems that need it.  Reported by Scott Kitterman.
        STATS: Add "-E" command line flag to opendkim-importstats, forcing
                an abort on any input error.

2.5.0           2012/02/29
        #####################################################################
        ###                                                               ###
        ###  This release is dedicated to the memory of J.D. Falk, a      ###
        ###  tireless champion of anti-abuse technology and collaboration ###
        ###  and a founding member of the Board of the Trusted Domain     ###
        ###  Project, a participant in related IETF work, and a long-time ###
        ###  particpant and supporter of MAAWG.  J.D. was taken by cancer ###
        ###  on November 16, 2011.  His enthusiasm and perspective for    ###
        ###  all of this work will be sorely missed.                      ###
        ###                                                               ###
        #####################################################################
        Feature request #SF3385816: Discontinue DomainKeys support.
        Feature request #SF3393282: Update ARF output per
                draft-ietf-marf-authfailure-report-03 et seq.
        Feature request #SF3406814: Add ability to invoke chroot().
        Feature request #SF3477908: Update DKIM reporting per
                draft-ietf-marf-dkim-reporting-10.
        Add "WeakSyntaxChecks" suppressing some short-circuiting error \ 
checks
                on syntax.
        Allow a set of test files to be passed via "-t" rather than \ 
just one.
        Add _FFR_REPUTATION, and several new support libraries (in the
                libut/ and reputation/ directories) for doing DKIM-based
                reputation evaluations of arriving messages.  Full
                documentation of the algorithms will appear in an upcoming
                white paper.  This also includes several new configuration
                options that make use of reputation data pulled from servers:
                        ReputationCache
                        ReputationCacheTTL
                        ReputationLimits
                        ReputationLowTime
                        ReputationMinimum
                        ReputationLimitModifiers
                        ReputationRatios
                        ReputationSpamCheck
                        ReputationTimeFactor
                For now these are briefly documented in reputation/README.
                As this subsystem matures, they will be fully documented in
                opendkim.conf(5).
        Fix bug #SF3471520: Don't crash when the first line of a configuration
                file is an "Include" instruction.
        Fix bug #SF3475149: Apply RFC2254 encoding to LDAP queries.
        LIBOPENDKIM: Feature request #SF3317160: Per RFC6376, remove
                granularity checks.
        LIBOPENDKIM: Feature request #SF3385768: Add dkim_privkey_load(),
                allowing validation of a private key before reaching
                end-of-message.
        LIBOPENDKIM: Feature request #SF3423226: Copy header field name lists
                instead of using the caller's copy.
        LIBOPENDKIM: Update list of header fields that should be signed
                per RFC6376.
        LIBOPENDKIM: Don't report the absence of "c=" as an error, since
                there is a default.
        LIBOPENDKIM: Add DKIM_SIG_CHECK() macro.  Suggested by Heikki
                Gruner.
        LIBAR: Fix bug #SF2917856: Rename "ar.h" to \ 
"async-resolv.h" since
                "ar.h" is already in common use.
        STATS: Feature request #SF3397903: Drop all support for data needed
                for the DKIM Implementation Report, as it has been completed.
                Leave stuff that's useful for reputation R&D.
        STATS: Feature request #SF3402857: Modify opendkim-spam to be able
                to write update records to statistics files.
        STATS: Feature request #SF3439384: Make opendkim-importstats more
                backend-agnostic.
        TOOLS: Add opendkim-testmsg, for signing/verifying messages without
                all the milter code being invoked.
        CONTRIB: Add LDAP documentation and examples.

Log message:
2.4.3
        Fix bug #SF3400670: Send ADSP failure reports when rejecting
                a message.
        Fix bug #SF3419149: Add MaximumSignedBytes to opendkim-config.h.
        Fix bug #SF3441240: Appy ReportBccAddress when generating ADSP
                reports.
        Fix bug #SF3447199: Fix logic preventing the application of the
                BodyLengthDB.
        Fix Authentication-Results generation with "AddAllSignatureResults"
                enabled.
        Fix a crash bug when trying to handle certain malformed header fields
                in verify-only mode.
        Improve error checking in the callback provided to libunbound to
                avoid crashes.
        Cope with versions of Sleepycat DB that crash when asking for a file
                descriptor for in-memory databases.
        Don't override "On-NoSignature" when "Quarantine" is set.
        Ignore header field names that contain semi-colons, as they produce
                syntactically invalid signatures.
        LIBOPENDKIM: Fix bug #SF3465400: Don't use "new" as a \ 
parameter name
                in dkim.h since that's an error for C++.
        LIBOPENDKIM: NOERROR is the same as NXDOMAIN for the purposes of
                the ADSP existence check.  Problem noted by Todd Nagengast.
        LIBOPENDKIM: Return DKIM_STAT_SYNTAX from dkim_header() if the header
                field name contained a semi-colon.
        LIBAR: After computing a timeout, if the fractional seconds portion
                adds to exactly a second, convert that amount to seconds.
                Previous versions only converted when the fractional portion
                exceeded a second.  This led to threads that spin
                indefinitely.  Problem noted by Todd Lyons and Gary Mills;
                forensic evidence revealing the problem at long last provided
                by Todd Lyons.
        STATS: Fix a crash bug in opendkim-importstats due to improper handling
                of NULL returns from SQL.

2.4.2
        Don't apply BodyLengthDB when not signing.
        LIBOPENDKIM: Update for draft-kucherawy-dkim-atps-06.
        LIBOPENDKIM: Terminate the strings returned by dkim_sig_getsubstring()
                and dkim_sig_getidentity() whenever possible.
        CONTRIB: Change "chkconfig" instruction in RHEL init script,
                and a minor tweak to the RPM spec file.

2.4.1           2011/06/28
        Fix bug #SF3312691: Add "-e" command line switch to extract a value
                from configuration.
        Fix bug #SF3324488: Accommodate postfix's job ID generation by moving
                the BodyLengthDB check down to EOH.
        Fix bug #SF3327106: Fix mode-based short-circuit logic.
        Patch #SF3321766: Remove "-d" from usage message (not implemented).
        Print database error strings instead of just return codes in
                query test mode, and clean up error strings when extracting
                them from the layers below.
        Minor fixes related to use of OpenDBX.
        LIBOPENDKIM: Fix bug #SF3328330: Correct generation of "z=" tags.
        LIBOPENDKIM: Patch #SF3313534: Improve thread-safe use of OpenSSL
                in dkim_init() and dkim_free().
        LIBOPENDKIM: Patch #SF3314269: Change all uses of off_t to ssize_t,
                as the former is reserved for use with filesystem APIs.
        LIBOPENDKIM: Make the user context pointer (void) rather than
                (const void) since the caller is allowed to change it.
        LIBOPENDKIM: Proper handling of DKIM_CBSTAT_ERROR from the prescreen
                and final callbacks.
        LIBOPENDKIM: Fix up initialization under _FFR_OVERSIGN.
        BUILD: Adjust gprof code to accomodate systems that put profiling
                output in <binary>.gmon rather than gmon.out.

2.4.0           2011/06/06
        Feature request #SF3060140: Extension of odkim.sign() to include
                maximum signed byte count.
        Feature request #SF3171865: Add _FFR_LUA_GLOBALS, enabling a
                mechanism to maintain state between Lua scripts.
        Feature request #SF3241982: Optionally add an Authentication-Results
                field for all signatures present, not just the first good one.
        Feature request #SF3256630: Add _FFR_RATE_LIMIT, enabling hooks for
                post-verification rate controls.
        Feature request #SF3290461: Add optional support for querying a
                memcache daemon via libmemcached.
        Feature request #SF3299041: Be tougher on use of the "l=" tag by
                removing "BodyLengths", renaming \ 
"BodyLengthDBFile" to
                "BodyLengthDB", and allowing pattern matches.  This
                effectively activates _FFR_BODYLENGTH_DB as well.
        Feature request #SF3303911: Add "DisableADSP" setting.
        In the stats recording code, only check for a domain match for
                signatures that don't have errors (i.e., short circuit if
                sigerror is not zero).
        LIBOPENDKIM: Feature request #SF2969516: Teach dkim_chunk() about
                DKIM_LIBFLAGS_FIXCRLF.
        LIBOPENDKIM: Feature request #SF3123731: Extend FixCRLF to cover
                header fields.
        LIBOPENDKIM: Feature request #SF3151534: Extract DKIM reputation
                support to its own library.
        LIBOPENDKIM: Feature request #SF3279589: Add _FFR_XTAGS, adding
                support for generic extension tags in signatures.
        LIBOPENDKIM: Feature request #SF3300738: Add dkim_sig_getqueries()
                and dkim_policy_getqueries() to assist API consumers that
                have their own DNS mechanisms not directly adaptable to ours.
        LIBOPENDKIM: Return an error from dkim_getsighdr() or
                dkim_getsighdr_d() if called after a key load failure.
        LIBAR: Check that the descriptor's write socket is writable before
                calling ar_sendquery() when trying to identify open requests
                that need retransmission.
        STATS: Feature request #SF3066106: Add "opendkim-anonstats" tool.
        CONTRIB: Paths in init/redhat/opendkim are now auto-generated.
        Activate _FFR_MAXVERIFY.

Log message:
Fixed pidfile path

Log message:
Made some corrections to the rc script

Log message:
pkglint clean-up

Log message:
2.3.2           2011/04/14
        Fix bug #SF3067338: Create a pool of DB handles for SQL operations
                so that queries don't all share one serially.
        Fix bug #SF3156559: Don't compile Lua scripts anew for each execution.
        Fix bug #SF3210385: Fix issue with configuration reload failures
                having some side effects on the remaining active configuration
                handle.  Reported by Andreas Schulze.
        Fix bug #SF3235131: Don't report ADSP errors as signature errors
                in Authentication-Results header fields.
        Fix bug #SF3258459: Don't send progress messages during EOH.  Problem
                reported by Gary Mills.
        Fix bug #SF3276469: When generating "z=" tags, apply omit and sign
                header field lists.  Problem noted by Todd Lyons.
        Add ADSP processing error information to A-R header fields.
        LIBOPENDKIM: Use a time_t to store TTL and clock drift options
                rather than unsigned long.  Patch from Piotr Sikora.
        LIBAR: Include class and type in debugging messages.  Suggested
                by Gary Mills.
        LIBAR: Start the dispatcher on the first query, not in ar_init().
                Allows ar_init() to be called before a fork() safely.
        CONTRIB: Adjust installed path in RedHat start script.  Patch
                from Naresh V.
        CONTRIB: Require the current libopendkim in the opendkim definition
                in the RPM spec file.  Patch from Naresh V.

2.3.1           2011/03/28
        Feature request #SF3196060: Log retrieved reputation values.
                Patch from Andreas Schulze.
        Feature request #SF3199824: Don't log "no signature data" unless
                LogWhy is enabled or the action for unsigned mail is something
                other than "accept".
        Fix bug #SF3196069: Log more detail when dkimf_config_setlib() fails.
                Problem noted by Andreas Schulze.
        Fix bug #SF3197890: Update ARF report format for DKIM verification
                failures to use what's in draft-ietf-dkim-marf-reporting.
        Fix bug #SF3204725: Add "ReplaceHeaders" data set to constrain what
                header fields are affected by "ReplaceRules".  Problem
                noted by Chris Callegari.
        Fix bug #SF3211114: Extract "BaseDirectory" from configuration
                file properly.
        Fix bug #SF3234178: Correct handling of a KeyTable entry for which the
                key data is empty.  Based on a patch from Yoshiaki Yanagihara.
        Patch #SF3205699: Make all header field name and domain name data
                sets case insensitive.  Submitted by Richard Rognlie.
        Add a case-insensitivity flag to odkim.db_open().
        Minor correction to DNS function return codes for unbound, which
                doesn't have an expired/no-reply distinction like libar does.
        LIBOPENDKIM: Fix up timeout handling with a DNS callback is in use.
        LIBOPENDKIM: Update for draft-kucherawy-dkim-atps-03.
        STATS: Fix bug #SF3195449: Omit data from reporters that are not
                currently marked "enabled" in the reporters table.
        STATS: Evaluate "i=" against the "d=" domain, not \ 
the "From" domain.
                Problem noted by Mark Martinec.
        STATS: A few more reports.
        MILTERTEST: Don't use non-standard printf() conversions.
        MILTERTEST: Get the SMFIP_HDR_LEADSPC logic right.
        TOOLS: Feature request #SF3200848: Add a backgrounding option
                (on by default) to opendkim-spam.

Log message:
2.3.0           2011/02/21
        Feature request #SF2964396: Allow SignHeaders, OmitHeaders and
                SenderHeaders to be specified as deltas to the default lists.
        Feature request #SF3053094: Correct documentation and improve function
                of the AuthservID configuration setting.  Requested by
                Andreas Schulze.
        Feature request #SF3060152: Add odkim.replace_header() function.
        Feature request #SF3060161: Add odkim.del_header() function.
        Feature request #SF3061189: Add new "quarantine" option to all the
                various "On-" settings.
        Feature request #SF3066104: Add "AnonymousDomains" configuration
                option.
        Feature request #SF3074290: Add _FFR_ATPS, experimental support for
                draft-kucherawy-dkim-atps.
        Feature request #SF3076684: Add "VBR-TrustedCertifiersOnly" flag.
        Feature request #SF3080604: Add odkim.parse_field() function.
                Requested by Todd Lyons.
        Feature request #SF3081697: Add "OversignHeaders" configuration
                option.
        Feature request #SF3085536: Activate _FFR_STATS_I, providing
                statistics reporting about use of "i=" in signatures.
        Feature request #SF3096630: Add odkim.rbl_check() function.
        Feature request #SF3097083: Make SigningTable accessible from Lua.
        Feature request #SF3103095: Allow "%" in a KeyTable entry's \ 
filename
                component as well as the domain name.
        Feature request #SF3105480: Improved VBR correctness; don't conduct
                VBR checks at all if there are disagreeing "mc" values in
                multiple VBR-Info header fields.
        Feature request #SF3106132: Allow "%" in a SigningTable's value.
        Feature request #SF3109963: Add "MaximumSignaturesToVerify" \ 
setting.
                Suggested by John Wood.
        Feature request #SF3110593: Add compile-time support for GnuTLS as
                an alternative to OpenSSL.  Suggested by Alessandro Vesely.
        Feature request #SF3136772: Sign the VBR-Info header field, if added.
                Requested by Frederik Pettai.
        Fix bug #SF3134119: With AutoRestart enabled, arrange to relay
                SIGUSR1 from the parent to the child rather than terminating.
                Reported by Yoshiaki Yanagihara.
        Fix bug #SF3141313: Trim whitespace from values in in-core data
                sets.  Reported by Todd Lyons.
        Fix bug #SF3156124: More robust handling of database disconnects.
                Also add _FFR_POSTGRESQL_RECONNECT_HACK, which will hopefully
                be temporary.  Reported by Miha Vrhovnik.
        Fix bug #SF3181180: Correct handling of quoted strings containing
                parentheses (and the opposite) when parsing
                Authentication-Results header fields.  Reported by
                Mark Martinec.
        Fix back-compatibility with very old implementations of milter in MTAs.
        Fix case-insensitive matching for domain names when doing signing
                selection.  Problem noted by John Espiro.
        New configuration file options:
                - "CaptureUnknownErrors", replacing the FFR of the \ 
same name
                - "DNSConnect", requesting the resolver use TCP mode
                - "KeepAuthResults", suppressing required removal of
                  Authentication-Results header fields
                - "ResolverTracing", adding detailed logging of libar \ 
activity
                - "StrictHeaders", requesing libopendkim to assert header
                  field counts according to the standards
                - "UnboundConfigFile", passing a configuration file name to
                  libunbound (suggested by Andreas Schulze)
                - "VBR-PurgeFields", removing "X-VBR-*" \ 
fields after using them
        Trim whitespace from the end of all values in a config file, not just
                strings.  Problem noted by Reuben Farrelly.
        Assume a default location for opendkim.conf.  Suggested by Andreas
                Schulze.
        Don't needlessly demand milter features, causing aborts when they're
                not available.  Problem noted by Todd Lyons.
        Make odkim.get_clienthost(), odkim.get_clientip() and
                odkim.get_fromdomain() available in the final script.
        When "SyslogSuccess" is active, log the selector and domain used.
                Suggested by Miha Vrhovnik.
        LIBAR: Feature request #SF3115073: Add flag for fine-grained activity
                logging for debugging purposes.
        LIBAR: Add support for using poll() instead of socket().
        LIBOPENDKIM: Feature request #SF3087029: Add DKIM_LIBFLAGS_STRICTHDRS.
        LIBOPENDKIM: Feature request #SF3089990: Add dkim_sig_getsignedhdrs().
        LIBOPENDKIM: Fix bug #SF3079094: Have dkim_diffheaders() take
                canonicalization into account when generating its results
                to avoid false positives.
        LIBOPENDKIM: Fix bug #SF3184670: Add error codes for missing and empty
                "v=" tags, thus avoiding a possible assertion failure when
                DKIM_LIBFLAGS_BADSIGHANDLES is in use.  Reported by J. Coloos.
        LIBOPENDKIM: Fix up handling of multi-TXT DNS replies inside
                dkim_get_policy_dns().
        LIBOPENDKIM: Add dkim_getid().
        LIBOPENDKIM: Treat no answers as an NXDOMAIN with respect to
                retrieving ADSP records.
        LIBOPENDKIM: When an unexpected DNS type or class is received,
                log the received values.
        LIBVBR: Feature request #SF3105477: Copy the generic DNS work from
                libopendkim.
        STATS: Feature request #SF3085536: Activate _FFR_STATS_I, providing
                statistics reporting about use of "i=" in signatures.
        STATS: Feature request #SF3125701: Add "s=" key value tracking.
        STATS: Feature request #SF3137445: Track key sizes.  Suggested by
                Todd Lyons.
        MILTERTEST: When asserting negotiation state, don't forget to capture
                what was negotiated.
        TOOLS: Feature request #SF3106876: Amend opendkim-testkey to return
                the DNSSEC results as well.
        TOOLS: Fix bug #SF3143922: Command line parameters to opendkim-testkey
                now override their configuration file counterparts.
        TOOLS: Experimental new "opendkim-spam" tool to let users update a
                stats database to indicate a message is spam, for possible
                later correlation use.
        BUILD: opendkim-genzone needs LIBCRYPTO_LDFLAGS.  Reported by
                John Smith.
        Activate _FFR_CAPTURE_UNKNOWN_ERRORS.

Log message:
2.2.2           2010/11/28
        Fix bug #SF2903325: Clean up numerous signed vs. unsigned warnings.
        Fix bug #SF3095782: When VBR is enabled, only perform a query when
                the "md" domain in the VBR-Info header field matches the
                "d" field for any valid signature.
        Fix bug #SF3105993: Better handling of missing records in Lua DB
                lookups.
        When reading keys, ensure what's being read is a regular file and
                not something else.
        Complain if TrustAnchorFile names something that can't be opened
                for reading.
        LIBOPENDKIM: Don't complain about multiple records returned if one
                of them was an RRSIG.
        LIBAR: Rework some I/O logic to avoid a deadlock when the nameserver
                becomes unresponsive during response processing.
        BUILD: Move all scripts and executables except opendkim to a bin
                directory for adminstrator convenience. They were previously in
                the sbin directory.
        BUILD: Fix bug #SF3101842: Fix opendkim-genzone build when OpenDBX
                is in use.
        BUILD: opendkim-testkey can require SASL build information when used
                with OpenLDAP, or Lua information when built with Lua.
        BUILD: Dissociate libopendkim and libunbound, as this is now handled
                through the application rather than the library.
        BUILD: Convert to using git for source code management.
        STATS: Additional reporting improvements.
        STATS: Fix bug #SF3107659: Add additional diagnostic output to
                opendkim-importstats when malformed input is found.
        TOOLS: Handle input generated with and without the _FFR_STATS_I
                extensions.

2.2.1           2010/10/25
        Avoid assertion failures when using "-V" and arlib.
        Fix "refile" loading.
        Fix collision between "ReputationRoot" and \ 
"StatisticsName" in the
                configuration file.
        Convert sender's domain name to lowercase prior to doing any database
                queries with it.  This was done before, but lost during the
                database overhaul in 1.2.0.
        Fix up Authentication-Results header field generation for VBR.
                Reported by Fredrik Pettai.
        Add _FFR_STATS_I enabling statistics reporting of "i=" signature
                properties.
        LIBOPENDKIM: Fix bug #SF3081964: dkim.h requires <sys/time.h>.
        LIBOPENDKIM: Fix bug #SF3087251: Use thread-safe resolver functions
                when avaialble.
        LIBOPENDKIM: Cancel completed reputation queries.
        LIBOPENDKIM: Simplify DKIM_OPTS_ALWAYSHDRS handling.
        LIBAR: Fix bug #SF3080720: Don't compute timeouts based on completed
                or dead queries.
        LIBVBR: Fix some pointer errors causing false negatives.
        TOOLS: Write "v=" tags in key records output by opendkim-genzone.

2.2.0           2010/10/03
        Feature request #SF2874043: Add _FFR_ADSP_LISTS allowing control over
                action taken when mail is sent to known lists from
                ADSP "discardable" sources.
        Feature request #SF2964366: Allow arbitrary data set operations
                from inside Lua script hooks.
        Feature request #SF2981598: Add "NoHeaderB" and \ 
"SingleAuthResult"
                settings so that only one Authentication-Results header field
                is added, and reduce its variability.
        Feature request #SF3013084: Add "DomainKeysCompat" setting.
        Feature request #SF3017358: Allow a token in the KeyTable that gets
                replaced with the sender's domain name.
        Feature request #SF3019876: Enable registration and use of generic
                DNS functions.
        Feature request #SF3021566: Change "ADSPDiscard" to \ 
"ADSPAction",
                allowing selection of what action to take when a message is
                determined by ADSP to be "discardable".
        Feature request #SF3023232: Allow selection of a signer (for the
                signature's "i=" tag) when calling odkim.sign() or via an
                optional second parameter in the SigningTable.
        Feature request #SF3024854: Always log a warning if a key file
                has unsafe group/other read/write bits set.  Further, if the
                new "RequireSafeKeys" setting is true, refuse to use \ 
the data.
        Feature request #SF3030548: Add _FFR_DEFAULT_SENDER, adding the
                "DefaultSender" setting.
        Feature request #SF3049483: Use ReportAddress for ADSP Reports and for
                the sender envelope address.
        Feature request #SF3056571: Extend signer selection in the SigningTable
                to include a token that will be replaced by the From:
                domain.
        Feature request #SF3062077: Allow the specification of additional
                recipients when delivering DKIM/ADSP failure reports through
                a new ReportBccAddress configuration option.
        Fix bug #SF3004995: Don't apply "SenderHeaders" to the library
                as that impacts how ADSP works.
        Fix bug #SF3025856: Fix "AllowSHA1Only", which was not working \ 
at all.
        Fix bug #SF3037504: Rework database schema and tools to meet revised
                reporting requirements.
        Fix bug #SF3051536: Allow disabling of reputation queries.
        Fix bug #SF3058204: Fix numerous possible double-free() incidents in
                dkimf_config_free().
        Fix PeerList to work with IPv6 addresses.
        Fix loop boundary check in dkimf_db_close().
        Fix assertion failure in dkimf_db_get() when used with a "match \ 
both"
                operation.
        Fix "LocalADSP", which was not working at all.
        Fix some Lua test mode logic and a build issue that prevented
                "ScreenPolicyScript" from working.
        Added MTACommand for overriding default (mainly for testing).
        Ignore "Domain" and "Selector" settings if \ 
"KeyTable" is set.
        Add "On-PolicyError" to configuration tables.
        Don't automatically temp-fail messages bearing signatures that
                reference revoked keys.
        Some fixes to the "final" Lua script self-test code.
        Include libmilter version in "-V" output.
        Single-thread DB queries done via OpenDBX handles as they can't be
                used to do parallel queries.
        Attempt to reconnect after SQL disconnections.
        Revise text/plain portion of policy reports.
        Fix up DSN parsing so that it is not needlessly restrictive.
        Add _FFR_STATSEXT: Allows arbitrary local extensions to statistics
                gathering via a fourth Lua script that can cause the
                generation of additional SQL insertion operations.
        LIBOPENDKIM: Feature request #SF3026287: Add dkim_getuser() function.
        LIBOPENDKIM: Feature request #SF3065035: Apply library query
                configuration to ADSP lookups as well, mainly to support
                auotmated testing.
        LIBOPENDKIM: Fix bug #SF3071368: Fix tiny memory leak in dkim_init().
        LIBOPENDKIM: Fix bug #SF3051762: Don't error out of dkim_get_key()
                when in test mode by testing signature-specific features when
                against dummy data.
        LIBOPENDKIM: Don't build against pthread libraries if not needed.
        LIBOPENDKIM: Add dkim_get_signer(), dkim_policy_state_new() and
                dkim_policy_state_free().
        LIBOPENDKIM: Don't assert a "g=" default when processing keys \ 
so that
                statistics reporting can tell whether or not it was originally
                there.
        LIBOPENDKIM: Minor fix to internal state machine when dealing with
                unsigned messages.
        LIBOPENDKIM: Rename DKIM_PRESULT_AUTHOR to DKIM_PRESULT_FOUND.
        LIBOPENDKIM: Improved error reporting from dkim_ohdrs().
        LIBOPENDKIM: Improved re-entrancy of dkim_eoh_verify().
        LIBOPENDKIM: Undefine DKIM_FEATURE_ASYNC_DNS (obsolete).
        MILTERTEST: Feature request #SF3005002: Enable testing of
                "unspecified" protocol family connections.
        MILTERTEST: Add "-u" option to report resource usage statistics on
                completion.
        MILTERTEST: Add mt.signal() to allow signaling of filters for things
                like configuration file reloads.
        MILTERTEST: Enhance mt.connect() to accept optional retry and interval
                arguments.
        MILTERTEST: Add "-w" option to request no waiting for the \ 
child process
                to exit and report status.
        MILTERTEST: Allow partial seconds argument to mt.sleep().
        TOOLS: Feature request #SF3004335: Add support to opendkim-testkey
                to get configuration file values and validate an entire
                KeyTable.
        TOOLS: Update opendkim-genkeys script to support
                draft-ietf-marf-dkim-reporting.
        TOOLS: Flip logic of "-a" flag to opendkim-stats.
        TOOLS: Fix bug #SF3037452: Change owner/group/mode of stats database
                when resetting it to whatever the replaced file had.
        CONTRIB: Add opendkim-reportstats, contributed by John Wood.
        BUILD: Fix --with-db.
        Activate _FFR_ZTAGS.