Your message dated Fri, 02 Feb 2007 06:47:02 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#408469: fixed in ca-certificates 20061027.2
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
Package: ca-certificates
Version: 20061027
Severity: serious
Justification: Policy 6.2 (sometimes interacts non-idempotently), 3.9 (error 
(missing dir) not checked for), 6.8 (removes files at wrong time)

The postrm, called with "remove", changes into a directory that
does not always exist.  The results are unpleasant.
1. if you try to remove the package when /etc/ssl/certs is empty, remove
fails, because dpkg removes the dir before postrm is called
2. if you removed but did not purge (typical within aptitude, because
such packages as openoffice.org-core pull you in automatically) and later
try to remove or purge again, remove/purge fails.

I believe you MUST be able to remove a package more than once,
idempotently (policy 6.2), but currently, you cannot.  Hence I think
the bug is serious.  (Apologies if I'm wrong about that.)
For example, dpkg can't always remove the package if brokenly installed.

Encountered during sarge -> etch upgrade error recovery:

wolfgang:~# dpkg -r ca-certificates
(Reading database ... 114332 files and directories currently installed.)
Removing ca-certificates ...
/var/lib/dpkg/info/ca-certificates.postrm: line 21: cd: /etc/ssl/certs: No such 
file or directory
dpkg: error processing ca-certificates (--remove):
 subprocess post-removal script returned error exit status 1
Errors were encountered while processing:
 ca-certificates

Possible solutions:
1. in postrm, check if dir exists before cd; or
2. create a prerm and remove the hash symlinks there
The second seems more in keeping with policy 6.8: the prerm should do
the cleanup, then dpkg can remove the dir /etc/ssl/certs listed in *.list
(and we won't get warnings about dir not empty)

Perhaps the dir is only empty if you answer the template question
the same way I did? It might explain why this hasn't been noticed
before.



--- End Message ---
--- Begin Message ---
Source: ca-certificates
Source-Version: 20061027.2

We believe that the bug you reported is fixed in the latest version of
ca-certificates, which is due to be installed in the Debian FTP archive:

ca-certificates_20061027.2.dsc
  to pool/main/c/ca-certificates/ca-certificates_20061027.2.dsc
ca-certificates_20061027.2.tar.gz
  to pool/main/c/ca-certificates/ca-certificates_20061027.2.tar.gz
ca-certificates_20061027.2_all.deb
  to pool/main/c/ca-certificates/ca-certificates_20061027.2_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Christian Perrier <[EMAIL PROTECTED]> (supplier of updated ca-certificates 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Fri,  2 Feb 2007 07:23:27 +0100
Source: ca-certificates
Binary: ca-certificates
Architecture: source all
Version: 20061027.2
Distribution: unstable
Urgency: low
Maintainer: Fumitoshi UKAI <[EMAIL PROTECTED]>
Changed-By: Christian Perrier <[EMAIL PROTECTED]>
Description: 
 ca-certificates - Common CA Certificates PEM files
Closes: 408469
Changes: 
 ca-certificates (20061027.2) unstable; urgency=low
 .
   * Non-maintainer upload to fix an RC issue revealed by the last NMU.
   * Avoid cd to /etc/ssl/certs to removing hash symlinks
     Closes: #408469
Files: 
 26e52c33295f967ab3ea44bfb36c33e4 539 misc optional 
ca-certificates_20061027.2.dsc
 aeed47a30b0437bb2d535e16a831ec50 153937 misc optional 
ca-certificates_20061027.2.tar.gz
 044122d6d4305d61877d036763b42d5a 94204 misc optional 
ca-certificates_20061027.2_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFFwtw41OXtrMAUPS0RAjHcAJ43T5t/gjiOHWxFx2VokFYeB5BrkACglEGl
Ec56njphM7/VV0yT3cd6zNU=
=ceIx
-----END PGP SIGNATURE-----


--- End Message ---

Reply via email to