2.6.7           2012/07/23
        Fix input handling for file data sets for the macro case.
        Ensure NULL-termination of macro value tests.
        STATS: Fix hang bug in opendkim-reportstats.
        STATS: Fix bug #SF3547363: Fix "Top 10" and DNSSEC trend reports.

2.6.6           2012/07/18
        LIBAR: Fix bug #SF3544522: Not all systems define a "_len" member for
                the sockaddr structures.
        LIBOPENDKIM: Fix bug #SF3545490: If the body handed to the library was
                missing a trailing line terminator, then dkim_canon_closebody()
                would end the hashes with some data not included.  Now, if
                DKIM_LIBFLAGS_FIXCRLF is set, it will detect this condition
                and correct it; if not, an error is returned.
        LIBOPENDKIM: If the job ID passed in during handle creation includes
                slashes and temporary file creation is enabled, convert the
                slashes to dots in the temporary file template.

2.6.5           2012/07/14
        Swap order of "header.d" and "header.i" values in
                Authentication-Results fields.
        BUILD: Fix bug #SF3543282: Corrections to Darwin/libar build adjustment
                made in 2.6.3.

2.6.4           2012/07/12
        Feature request #SF3542099: Include "header.d" in all
                Authentication-Results fields, not just "header.i".  This
                makes life easier for users of OpenDMARC.
        BUILD: Fix SHA256 test on some systems.

2.6.3           2012/07/11
        Add "ResolvConf" setting, allowing the ability to pass a
                resolv.conf-like file to unbound to allow specific nameservers
                to be used instead of the default.
        LIBOPENDKIM: Return the correct error code when a SHA1-only library
                encounters a SHA1 signature that references a SHA256-only key.
        LIBAR: Add ar_resolvconf().
        BUILD: Fix bug #SF3538676: Build with -DDARWIN on MacOSX, and default
                to arlib if unbound isn't selected.

2.6.2           2012/07/02
        Fix build confusion between _FFR_RATE_LIMIT and _FFR_RESIGN.
        Fix bug #SF3538639: Fix error when --domain is not provided to
                opendkim-genrates.  Problem noted by Andreas Schulze.
        Fix bug #SF3539449: Clarify legal "Socket" values.
        Fix bug #SF3539493: Handle certain cases of data set names that
                appear to be comma-separated lists which include IPv6
                addresses.

2.6.1           2012/06/25
        Restore and activate _FFR_SELECT_CANONICALIZATION.  Also adds a
                SelectCanonicalizationHeader configuration option.
        Remove _FFR_SELECTOR_HEADER.
        Update Authentication-Results parsing to understand "dkim-atps"
                (RFC6541) and no longer understand "hardfail" (RFC6577).
        LIBAR: Fix bug #SF3309946: Ensure the dispatcher doesn't hold the
                master lock when it might enter a read wait.
        STATS: Add a database index on messages.msgtime to aid with
                expiration performance.
        TOOLS: Feature request #SF3536385: Add "-a" to opendkim-genkey to
                include a domain name in the generated TXT record.

2.6.0           2012/06/07
        Feature request #SF3502777: Log all authentication results rather than
                relying on logging of Authentication-Results header fields.
        Feature request #SF3512286: Add "LDAPSoftStart" flag so the filter
                doesn't abort on startup when LDAP is not available.
        Feature request #SF3512836: Add _FFR_SOCKETDB, which enables support
                for a generic socket data set.
        Feature request #SF3514982: Add Erlang data set support.
        Feature request #SF3516253: Update to newest "repute" working group
                documents, which mainly means adding JSON support and
                promoting application-specific extensions to the top level
                in the reputon structure.
        Feature request #SF3518593: Add support for OpenLDAP's MDB as a
                data set backend.
        Feature request #SF3519002: Put reason information inside a "reason"
                tag in Authentication-Results header fields rather than in
                comments.
        Feature request #SF3521000: Log hostname and daemon name (taken from
                macros) when logging "no MTA name match".
        Feature request #SF3524756: Add ability to request TCP keepalive
                features via the OpenLDAP client library.
        Feature request #SF3529233: Add odkim.get_envfrom() to all Lua scripts.
        Fix bug #SF3518877: Separate variable expansion from literal text in
                opendkim-genkey.
        Fix bug #SF3522883: Allow TLS for ldapi URIs.  Problem noted by
                Quanah Gibson-Mount.
        Fix bug #SF3527428: Construct the LDAP URI list properly, rather than
                only keeping the last one, and add failover code.
        Patch #SF3522895: Add contrib/ldap/opendkim.ldif.
        Activate _FFR_XTAGS.
        Remove _FFR_SELECT_CANONICALIZATION.
        LIBAR: Fix bug #SF3444318: Do proper buffer size calculations to
                avoid valgrind warnings about references to unaddressable
                space.
        LIBOPENDKIM: Fix bug #SF3496041: Remove _FFR_PARSETIME.
        LIBOPENDKIM: Fix bug #SF3516653: By default, treat a syntax error
                in an ADSP record as an NXDOMAIN.  Add new library flag
                DKIM_LIBFLAGS_REPORTBADADSP to restore the original
                behaviour.
        LIBOPENDKIM: Fix bug #SF3524865: Disallow generation of signatures
                where signer and signing domain don't match per the DKIM
                specification.  Add DKIM_LIBFLAGS_DROPSIGNER which, if set,
                will still generate signatures in that case, but with the
                signer omitted so the signature is still compliant.
        BUILD: Fix bug #SF3425384: Add missing support for compiling
                against libevent2, which is an option for unbound.
        BUILD: Fix bug #SF3475799: Don't do a manual check for libdb.a.
                Use the AC_CHECK_* macros instead.
        DOCS: Fix bug #SF3518864: The license for IETF documents is not
                compatible with free software licensing, which makes packaging
                a bit of a chore.  Replace all the text files in the "docs"
                directory with a single HTML page that includes links to
                all the things we used to include here.
        STATS: Feature request #SF3110059: Move opendkim-reportstats from
                contrib/stats to stats, making it fully supported.
        STATS: Feature request #SF3525786: Add opendkim-expire script.
        STATS: Feature request #SF3528652: Allow a specific list of domains,
                possibly read from a file, for opendkim-gengraphs and
                opendkim-genrates.
Updated mail/opendkim to 2.6.7