make 3.3.1 changelog somewhat readable

diff --git a/pdns/docs/pdns.xml b/pdns/docs/pdns.xml
index 8ce42ea96f3ef337c5334febca9d927cdd7e4648..bea7a2d4212c1e389ccc2857209f8d1a1c26c488 100644 (file)
--- a/pdns/docs/pdns.xml
+++ b/pdns/docs/pdns.xml
@@ -117,27 +117,12 @@
         <itemizedlist>
           <listitem>
             <para>
-              g705ddc9: Merge pull request t1171 from mind04/auth-3.3.1
+              direct-dnskey is no longer experimental, thanks Kees Monshouwer &amp; co for extensive testing (ge4b36a4).
             </para>
           </listitem>
           <listitem>
             <para>
-              g9dd2661: update debian pdns.conf
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              ge4b36a4: remove experimental status from direct-dnskey
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g5dde2c6: ok, so it turns out that poll, select and a few other system calls can return EINTR when we receive and interrupt, and we need to manually restart. man 7 signal makes for good reading on this case, as does http://blog.reverberate.org/2011/04/eintr-and-pc-loser-ing-is-better-case.html
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              gc63bc74: Merge pull request t1159 from mind04/auth-3.3.1
+              Handle signals during poll (g5dde2c6).
             </para>
           </listitem>
           <listitem>
@@ -157,7 +142,7 @@
           </listitem>
           <listitem>
             <para>
-              g9a6e39c: Update gpgsql queries
+              gpgsql queries were simplified through the use of casting (g9a6e39c).
             </para>
           </listitem>
           <listitem>
@@ -165,11 +150,6 @@
               ga7aa9be: Replace hardcoded make with variable
             </para>
           </listitem>
-          <listitem>
-            <para>
-              g7c31fcf: Merge pull request t1154 from mind04/auth-3.3.1
-            </para>
-          </listitem>
           <listitem>
             <para>
               ge4fe901: make sure to run PKG_PROG_PKG_CONFIG before the first PKG_* usage
@@ -192,57 +172,12 @@
           </listitem>
           <listitem>
             <para>
-              gd1e2482: Merge pull request t1143 from mind04/auth-3.3.1
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              gf389b12: move spec files to redhat directory
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              gd04960a: testbuild spec files for rawhide
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g76100dc: use sed in buildscripts
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g9897963: drop unused vars, thanks Morten Stevens
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              gd3f6432: presumably fix building on os x 10.9, thanks @mactijn
+              gd3f6432: fix building on os x 10.9, thanks Martijn Bakker.
             </para>
           </listitem>
           <listitem>
             <para>
-              gbef3000: Use LUA_CFLAGS and LUA_LIBS instead of hardcoded paths.
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g2bdd03b: make luabackend respect LUA_LIBS instead of forcing -llua5.1
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g88d9e99: fix lua 5.2 version check in luabackend
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              gb95852c: update .gitignore files
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g665586e: add SPF record to test.com and make recent named-checkzone happy
+              We now allow building against Lua 5.2 (gbef3000, g2bdd03b, g88d9e99).
             </para>
           </listitem>
           <listitem>
@@ -252,77 +187,24 @@
           </listitem>
           <listitem>
             <para>
-              gf9f79b3: correct overloading of feedRecord
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              ge4faf74: do right timezones right
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g82f6907: update loop breakout test
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              gdfd1b82: send empty SERVFAIL on exeeded retargetcount and log failures
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g5584bca: s/dnswasher/dnsreplay in dnsreplay manpage
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              gc669f7c: force ragel alphtype to unsigned char, fixing non-ASCII TXT parsing on signed char platforms like s390x
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g07b904e: fix base64 decoding for big endian archs on which long is not 32 bits (like s390x)
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              gafdc59a: Removed debugging
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              gfc54ce5: Fixed argument handling
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g95428ce: Implement sort properly with POSIX locale
+              When misconfigured using 'right' timezones, a bug in (g)libc gmtime breaks our signatures. Fixed in ge4faf74 by Kees Monshouwer by implementing our
+              own gmtime_r.
             </para>
           </listitem>
           <listitem>
             <para>
-              g705633d: Now sorts includes, fixes t913
+              When sending SERVFAIL due to a CNAME loop, don't uselessly include the CNAMEs (gdfd1b82).
             </para>
           </listitem>
           <listitem>
             <para>
-              gff07f01: allow empty parent
+              Build fixes for platforms with 'weird' types (like s390/s390x):
+              gc669f7c (<ulink url="http://blog.powerdns.com/2013/10/28/on-ragel-and-char-types/">details</ulink>), g07b904e and g2400764.
             </para>
           </listitem>
           <listitem>
             <para>
-              g98dd325: Support for += syntax for options, candidate for ticket t502
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g5e1bf3d: make sure we have a parrent option
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g0c1fe2a: Support for += syntax for options, candidate for ticket t502
+              Support for += syntax for options, g98dd325 and others.
             </para>
           </listitem>
           <listitem>
@@ -330,26 +212,6 @@
               gf8f29f4: nproxy: Add missing chdir("/") after chroot()
             </para>
           </listitem>
-          <listitem>
-            <para>
-              gfd76ab1: Unit test for empty lookup/list result
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g3d8c97f: Fix handling of empty lookup/list result
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g4c8736c: Merge pull request t1114 from mind04/auth-3.3.1
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              gebb64c7: actually grab polarssl version number, thanks Morten Stevens
-            </para>
-          </listitem>
           <listitem>
             <para>
               g2e6e9ad: fix for "missing" libmysqlclient on RHEL/CentOS based systems
@@ -357,97 +219,19 @@
           </listitem>
           <listitem>
             <para>
-              gbb4cae6: add unbound-host to travis builds
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              gc6edd2f: fix for "missing" libmysqlclient on RHEL/CentOS based systems
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g5205892: pdnssec check-zone, fix DNSKEY checks
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              gedb255f: pdnssec check-zone, more tolerant IPv6 format check
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g0dde9d0: pdnssec check-zone, fix record counting and improve out of zone check
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g07ee700: pdnssec check-zone, improve duplicate checks
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g79a3091: pdnssec check-zone, improve SOA content check
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g08f3452: pdnssec check-zone, check for missing NS at apex and records in unlikely places
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              gbcf9daf: pdnssec check-zone, warn if parsed and original content are not equal
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g3191709: fix NSEC3s for DS no data (mode 1)
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              gf75293f: fix NSEC wildcard denial
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              gc9a3dd7: make pdnssec check-all-zones case independent (Issue t684)
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g6ebfd08: pdnssec check-all-zones now detect ttl differnce within a rrset
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              gfd53bd0: check for duplicate records with pdnssec check-all-zones (Issue t607)
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g7eaa83a: pdnssec check-all-zones now detect RRSIG records in non-presigned zones
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              ge319467: detect duplicate cnames with pdnssec check-all-zones (Issue t545)
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g3dfb45f:  fix ringbuffer size decrease
+              pdnssec check-zone improvements in g5205892, gedb255f, g0dde9d0, g07ee700,
+              g79a3091, g08f3452, gbcf9daf, gc9a3dd7, g6ebfd08, gfd53bd0, g7eaa83a,
+              ge319467, , 
             </para>
           </listitem>
           <listitem>
             <para>
-              g74baf86: fix NSEC for asterisk ents and add test
+              NSEC/NSEC3 fixes in g3191709, gf75293f, gcd30e94, g74baf86, g1fa8b2b
             </para>
           </listitem>
           <listitem>
             <para>
-              gcd30e94: Fix closest encloser proof for wildcard nodata answers. Add some tests to make sure I won't break this again...
+              The webserver could crash when the ring buffers were resized, fixed in g3dfb45f.
             </para>
           </listitem>
           <listitem>
@@ -460,11 +244,6 @@
               gf104427: make domainmetadata queries case insensitive
             </para>
           </listitem>
-          <listitem>
-            <para>
-              g1fa8b2b: answer direct NSEC queries without DO bit
-            </para>
-          </listitem>
           <listitem>
             <para>
               g78fc378: no label compression for name in TSIG records
@@ -472,7 +251,7 @@
           </listitem>
           <listitem>
             <para>
-              g15d6ffb: output ZSK DNSKEY records if experimental-direct-dnskey support is enabled
+              g15d6ffb: pdnssec now outputs ZSK DNSKEY records if experimental-direct-dnskey support is enabled (renamed to direct-dnskey before release!)
             </para>
           </listitem>
           <listitem>
@@ -482,52 +261,12 @@
           </listitem>
           <listitem>
             <para>
-              g4fe4177: Remove unused mysql dependency from pdns_server and pdnssec.
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g7632dd8: support polarssl 1.3
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              gc60ca6d: Enable subdir-objects for automake-1.14
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g80411f1: Replace PolarSSL-conditionals in Makefile.am and trust the include dirs
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g044707e: Now uses send/recv wrapper to handle exceptions and connector rebuild
+              g7632dd8: support polarssl 1.3 externally.
             </para>
           </listitem>
           <listitem>
             <para>
-              ga9da3c0: update gitignore
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              gc271ff3: add unit test to check if we detected byte order correctly
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g2fefd1a: our OPT testing appears to have been little-endian only, this might improve things
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g2400764: for ages... we messed up base64 decoding on big endian platforms. The shame.
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              ge655f11: Fix truncating bug
+              Remotebackend was fully updated in various commits.
             </para>
           </listitem>
           <listitem>
@@ -537,12 +276,7 @@
           </listitem>
           <listitem>
             <para>
-              ga3a546c: add innodb-read-committed option
-            </para>
-          </listitem>
-          <listitem>
-            <para>
-              g14a4f1e: unbreak auth osx compilation, closes t902
+              ga3a546c: add innodb-read-committed option to gmysql settings.
             </para>
           </listitem>
           <listitem>