Your message dated Sat, 03 Dec 2016 04:48:35 +0000
with message-id <e1cd2fx-0005p6...@fasolo.debian.org>
and subject line Bug#841208: fixed in monkeysphere 0.41-1
has caused the Debian Bug report #841208,
regarding monkeysphere: FTBFS (not enough entropy to generate keys)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
841208: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=841208
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: src:monkeysphere
Version: 0.40-2
Severity: serious
Dear maintainer:
I tried to build this package in stretch with "dpkg-buildpackage -A"
(which is what the "Arch: all" autobuilder would do to build it)
but it failed:
--------------------------------------------------------------------------------
[...]
debian/rules build-indep
dh build-indep
dh_testdir -i
dh_update_autotools_config -i
dh_auto_configure -i
dh_auto_build -i
make -j1
make[1]: Entering directory '/<<PKGBUILDDIR>>'
gcc -o src/agent-transfer/agent-transfer -g -O2
-fdebug-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -Wformat
-Werror=format-security --pedantic -Wall -Werror -std=c99 -Wl,-z,relro
src/agent-transfer/main.c -lassuan -L/usr/lib/x86_64-linux-gnu -lgpg-error
-lgcrypt
mkdir -p replaced/src/
sed < src/monkeysphere > replaced/src/monkeysphere \
-e 's:__SYSSHAREDIR_PREFIX__:/usr:' \
-e 's:__SYSCONFDIR_PREFIX__::' \
[... snipped ...]
ms: 6FA88BBE2950EC87973066B074D22D5F837F9056:6:
ms: checking gpg_sphere owner trust set properly...
ms: checking trust model for authentication ...
ms: sphere trust model: 1:3:1
ms: reading key from stdin...
ms: checking keys in file...
ms: loading key into core keyring...
ms: executing core ltsign script...
ms: exporting core local sigs to sphere...
ms: updating sphere trustdb...
ms: Identity certifier added.
##################################################
### list certifiers...
ms: checking authentication directory structure...
ms: writing core gpg.conf...
ms: writing sphere gpg.conf...
ms: fixing sphere gnupg home ownership...
ms: determining core key fingerprint...
ms: core fingerprint: 6FA88BBE2950EC87973066B074D22D5F837F9056
ms: Monkeysphere authentication trust core already exists.
ms: exporting core pub key to sphere keyring...
ms: setting ultimate owner trust on core key in gpg_sphere...
ms: # List of assigned trustvalues, created Tue Oct 18 11:46:39 2016 CEST
ms: # (Use "gpg --import-ownertrust" to restore them)
ms: 6FA88BBE2950EC87973066B074D22D5F837F9056:6:
ms: checking gpg_sphere owner trust set properly...
ms: checking trust model for authentication ...
ms: sphere trust model: 1:3:1
ms: finding trusted keys...
ms: determining core key fingerprint...
4275279C9512E14BDD14098A36FF78B37005D3BE:
:Monkeysphere Test Suite Fake Administrative User (DO NOT USE!!!)
<fakead...@example.net>:1:120:
##################################################
### generating key for testuser...
ms: creating password fifo...
ms: Prompting for passphrase
ms: Launching "/<<PKGBUILDDIR>>/tests/tmp/ms.IOG/testuser/.ssh/askpass"
ms: (with prompt "Please enter your passphrase for E00B5EEEBA79B482: ")
ms: Generating subkey. This may take a long time...
gpg: signal Terminated caught ... exiting
FAILED!
### removing temp dir...
make[1]: *** wait: No child processes. Stop.
make[1]: *** Waiting for unfinished jobs....
make[1]: *** wait: No child processes. Stop.
make: *** wait: No child processes. Stop.
make: *** Waiting for unfinished jobs....
make: *** wait: No child processes. Stop.
E: Build killed with signal TERM after 60 minutes of inactivity
--------------------------------------------------------------------------------
The relevant part of the build log is included above.
This builds ok in buildd.debian.org, but, IMO, this is not enough,
because this is like having a missing "build-depends: entropy".
Sure, official buildds usually have enough entropy, but that's not
something that we can really assume that will always happen.
Please take a look at this bug in mini-buildd which is very similar:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=834683
Maybe the solution that was adopted there could be used here as well.
Thanks.
--- End Message ---
--- Begin Message ---
Source: monkeysphere
Source-Version: 0.41-1
We believe that the bug you reported is fixed in the latest version of
monkeysphere, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 841...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Daniel Kahn Gillmor <d...@fifthhorseman.net> (supplier of updated monkeysphere
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 02 Dec 2016 22:58:25 -0500
Source: monkeysphere
Binary: monkeysphere agent-transfer
Architecture: source
Version: 0.41-1
Distribution: unstable
Urgency: medium
Maintainer: Jameson Rollins <jroll...@finestructure.net>
Changed-By: Daniel Kahn Gillmor <d...@fifthhorseman.net>
Description:
agent-transfer - copy a secret key from GnuPG's gpg-agent to OpenSSH's
ssh-agent
monkeysphere - leverage the OpenPGP web of trust for SSH and TLS authentication
Closes: 595947 841208 842823 846554
Changes:
monkeysphere (0.41-1) unstable; urgency=medium
.
* new upstream release
- pem2openpgp now includes issuer fingerprint subpacket
in hashed self-sig, more compatible with GnuPG 2.1.16
(Closes: #846554)
- avoid blocking for entropy during test suite
(Closes: #841208)
- ensure that attempts to fetch primary key fingerprint only fetch
primary key fingerprint even if subkey fprs are emitted
(Closes: #846554)
* convert to debhelper 10
* wrap-and-sort -ast
* add netcat-openbsd to Recommends (Closes: #595947)
* switch Recommends: from cron to cron-daemon (Closes: #842823)
* drop patches already applied upstream
* moved debian packaging to collab-maint for better visibility
* added debian/watch to make lintian happy
* converted debian/NEWS to not use asterisk-bulleted style
* use all hardening options during C build
Checksums-Sha1:
b5c367b3c3c60676476d411689b395c8643cd584 2324 monkeysphere_0.41-1.dsc
8d4113e8647e2bc01f889664476ed644bee7ce0e 109040 monkeysphere_0.41.orig.tar.gz
37ed18b41558ceac39a875cc931276b33f9436b1 6032 monkeysphere_0.41-1.debian.tar.xz
Checksums-Sha256:
ea06e673a584584616846a65c61ad0be23935559b2db69869068a281d8f9a547 2324
monkeysphere_0.41-1.dsc
911a2f1622ddb81151b0f41cf569ccf2154d10a09b2f446dbe98fac7279fe74b 109040
monkeysphere_0.41.orig.tar.gz
a2d0e606c693bda38548ef22601d33e2f1676da07381e82fbc9c0d437ffaf562 6032
monkeysphere_0.41-1.debian.tar.xz
Files:
a7beb80cbd49cf316eb2e0ad1a5e7f8e 2324 net extra monkeysphere_0.41-1.dsc
77a971850d6d35d6e1135add9c4fce5d 109040 net extra monkeysphere_0.41.orig.tar.gz
21add23458fcb728fb9acee2633f79d4 6032 net extra
monkeysphere_0.41-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=sXgQ
-----END PGP SIGNATURE-----
--- End Message ---
