On Sat, 3 May 2025 12:46:03 +0200 Santiago Vila <sanv...@debian.org> wrote:
severity 1104509 serious
thanks

Hi. The package failed to build because the service provided
by "timestamp.digicert.com" was returning "500 Internal Server Error".
(You can see that in the build log I provided).

However, the bug is not the build failure as such (which does not
currently happen because they have restored the service) but the fact,
forbidden by policy, that the package was trying to access
Internet during the build to begin with.

You can check that the package tries to access Internet in
several ways:

* By just looking at the build log.

* By using tcpdump during the build.

* By trying to build the package after adding this line to /etc/hosts:

127.0.0.1       timestamp.digicert.com


Please note that this has been considered serious and RC for a long time,
regardless of the package failing to build or not.
The machine where I built it did not have any internet connection. I turned off all internet connections during the build (wifi and usb tethering was turned off). The build was successful without any internet connection available during build.

Attachment: OpenPGP_0x8F53E0193B294B75.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

Reply via email to