Bug#874339: ITP: rpy2-2.8 -- Python interface to the GNU R language and environment

[Tobias Hansen]

Package: wnpp
Severity: wishlist
Owner: Tobias Hansen 

* Package name: rpy2-2.8
  Version : 2.8.6
  Upstream Author : Laurent Gautier 
* URL : https://rpy2.bitbucket.io/
* License : GPL-2+
  Programming Lang: C, Python
  Description : Python interface to the GNU R language and environment

 This Debian package provides RPy2, a very simple yet robust Python interface
to the GNU R Programming Language. It can manage different types of R objects,
and can execute arbitrary R functions, including graphic functions. Rpy2 is a
rewrite and extension of the older RPy interface.

 Rpy2 is already in Debian, however Rpy2 2.9 no longer supports Python 2, so
the Python 2 package was recently removed from Debian. Since sagemath depends
on rpy2 while using Python 2, this package reintroduces the Python 2 version of
Rpy2, based on the 2.8 series.

Bug#874340: ITP: confidantmail -- Secure GPG-based non-SMTP email and large file transfer

[Mike Ingle]

Package: wnpp
Severity: wishlist
Owner: Mike Ingle 

* Package name: confidantmail
  Version : 0.41
  Upstream Author : Mike Ingle 
* URL : https://www.confidantmail.org/
* License : GPL
  Programming Lang: Python 2.7
  Description : Secure GPG-based non-SMTP email and large file transfer

Secure GPG-based non-SMTP email and large file transfer. Has a wxPython GUI
that resembles Thunderbird. Can send multi-gigabyte attachments in chunks over
clearnet, Tor, i2p. Anyone can run a server and all servers exchange messages.
Uses a DHT for key distribution. There is a public server cluster available for
anyone to use.

Dependencies: python-wxgtk3.0 python-twisted python-enchant
  python-socks python-cryptography

I already have a working .deb package on the website. Code is all python and
GPL.
Servers have been up since 2015, Windows and MacOS clients are also available.
Uses Entangled DHT code, which is GPL, was abandoned by its author, and I
released a bugfix version. I'm going to ask for a mentor on the debian-mentors
list.

Help, I broke sso.debian.org for chrome

[Enrico Zini]

Hello,

I refactored the certificate generation code for sso.debian.org, and the
certificates it generates now still work in Firefox but not in Chrome.

Steps to reproduce:

1. Back up and delete all Debian certificates in Chrome
2. Go to one of these links to generate a new one:
   https://sso.debian.org/debian/certs/enroll_csr/
   https://sso.debian.org/alioth/certs/enroll_csr/
3. Go to chrome://settings/certificates and import it
   (remember to combine key and certificate in a .p12 file, the
   enroll_csr has a command line example
4. Visit https://sso.debian.org/ca/test/env: chrome doesn't even ask for
   which certificate to use

Can you help me find out what is in the certificates it generates now
that chrome doesn't like?

This is the code that generates the certificate:
https://anonscm.debian.org/cgit/debian-sso/debian-sso.git/tree/ca/ca.py#n402

This is the code before the refactoring:
https://anonscm.debian.org/cgit/debian-sso/debian-sso.git/tree/ca/ca.py?id=926d5ca1c448fdd4f02ae7247ef5f695d8e2f22e#n331


Enrico

-- 
GPG key: 4096R/634F4BD1E7AD5568 2009-05-08 Enrico Zini 


signature.asc
Description: PGP signature

Re: Help, I broke sso.debian.org for chrome

[Christoph Berg]

Re: Enrico Zini 2017-09-05 <20170905093701.xncmprl2x4so6...@enricozini.org>
> I refactored the certificate generation code for sso.debian.org, and the
> certificates it generates now still work in Firefox but not in Chrome.

My guess is that the new-style certificates are missing some
attributes:

Old certificate from 2015:

X509v3 extensions:
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Key Usage: critical
Digital Signature, Key Encipherment, Key Agreement
X509v3 Extended Key Usage: 
TLS Web Client Authentication

New certificate from this week:

X509v3 extensions:
X509v3 Subject Alternative Name: 
email:m...@debian.org
X509v3 Basic Constraints: critical
CA:FALSE

I'll see if I can add that.

Christoph

Help needed for #871234 FTBFS with GCC-7: error: type/value mismatch

[Alex Mestiashvili]

Any help is greatly appreciated,
here it the gcc's complain:

In file included from gff.h:12:0,
 from gtf_tracking.h:12,
 from bundles.h:22,
 from replicates.h:10,
 from common.cpp:28:
GHash.hh: In member function 'GHash::GHashEntry*
GHash::NextEntry()':
GHash.hh:91:44: error: type/value mismatch at argument 1 in template
parameter list for 'template struct std::hash'
 while (pos

Bug#874360: ITP: ruby-hocon -- Ruby port of the Typesafe Config library

[Apollon Oikonomopoulos]

Package: wnpp
Severity: wishlist
Owner: Apollon Oikonomopoulos 

* Package name: ruby-hocon
  Version : 1.2.5
  Upstream Author : Chris Price, Wayne Warren, Preben Ingvaldsen, Joe 
Pinsonault, Kevin Corcoran, Jane Lu
* URL : https://github.com/puppetlabs/ruby-hocon
* License : Apache-2.0
  Programming Lang: Ruby
  Description : Ruby port of the Typesafe Config library

ruby-hocon is a port of the Typesafe Config Java library to Ruby.
The library provides Ruby support for the HOCON configuration file 
format. It supports parsing and modification of existing HOCON/JSON 
files as well as rendering parsed config objects back to a Ruby String.

This library is required to add HOCON support for Hiera 5/Puppet 5 and 
will be maintained under the DRE team umbrella.

Re: Help, I broke sso.debian.org for chrome

[Ian Jackson]

Christoph Berg writes ("Re: Help, I broke sso.debian.org for chrome"):
> Re: Enrico Zini 2017-09-05 <20170905093701.xncmprl2x4so6...@enricozini.org>
> > I refactored the certificate generation code for sso.debian.org, and the
> > certificates it generates now still work in Firefox but not in Chrome.
> 
> My guess is that the new-style certificates are missing some
> attributes:
> 
> Old certificate from 2015:
> 
> X509v3 extensions:
> X509v3 Basic Constraints: critical
> CA:FALSE
> X509v3 Key Usage: critical
> Digital Signature, Key Encipherment, Key Agreement
> X509v3 Extended Key Usage: 
> TLS Web Client Authentication

This last one seems like it ought to be there.  I don't know about the
Key Usage.

IIRC there are ways to get the openssl CLI to add specific extenstions
but I don't know how to do that in the API Enrico is using in sso.

FYI, Enrico, the openssl CLI tool can dump this kind of thing so you
can compare before and after.  I forget the exact runes I'm afraid.

Ian.

Re: Help, I broke sso.debian.org for chrome

[Tim Rühsen]

 


With Best Regards, Tim



On 09/05/2017 03:08 PM, Ian Jackson wrote:
> Christoph Berg writes ("Re: Help, I broke sso.debian.org for chrome"):
>> Re: Enrico Zini 2017-09-05 <20170905093701.xncmprl2x4so6...@enricozini.org>
>>> I refactored the certificate generation code for sso.debian.org, and the
>>> certificates it generates now still work in Firefox but not in Chrome.
>>
>> My guess is that the new-style certificates are missing some
>> attributes:
>>
>> Old certificate from 2015:
>>
>> X509v3 extensions:
>> X509v3 Basic Constraints: critical
>> CA:FALSE
>> X509v3 Key Usage: critical
>> Digital Signature, Key Encipherment, Key Agreement
>> X509v3 Extended Key Usage: 
>> TLS Web Client Authentication
> 
> This last one seems like it ought to be there.  I don't know about the
> Key Usage.
> 
> IIRC there are ways to get the openssl CLI to add specific extenstions
> but I don't know how to do that in the API Enrico is using in sso.
> 
> FYI, Enrico, the openssl CLI tool can dump this kind of thing so you
> can compare before and after.  I forget the exact runes I'm afraid.

Or GnuTLS's certtool:

certtool -i --infile tests/certs/x509-ca-cert.pem

Regards, Tim



signature.asc
Description: OpenPGP digital signature

Re: Help needed for #871234 FTBFS with GCC-7: error: type/value mismatch

[Juhani Numminen]

Hi Alex!

Alex Mestiashvili kirjoitti 05.09.2017 klo 14:55:

parameter list for 'template struct std::hash'
  while (pos
I think the problem is we don't want std::hash but GHash::hash and
GHash::GHashEntry::hash.
(Sorry, I haven't looked deeper into how to get the correct 'hash'.)

Cheers,
Juhani

Re: Help, I broke sso.debian.org for chrome

[Enrico Zini]

On Tue, Sep 05, 2017 at 12:16:47PM +0200, Christoph Berg wrote:

> My guess is that the new-style certificates are missing some
> attributes:
> 
> Old certificate from 2015:
> 
> X509v3 extensions:
> X509v3 Basic Constraints: critical
> CA:FALSE
> X509v3 Key Usage: critical
> Digital Signature, Key Encipherment, Key Agreement
> X509v3 Extended Key Usage: 
> TLS Web Client Authentication
> 
> New certificate from this week:
> 
> X509v3 extensions:
> X509v3 Subject Alternative Name: 
> email:m...@debian.org
> X509v3 Basic Constraints: critical
> CA:FALSE
> 
> I'll see if I can add that.

I should have managed to do it, but chrome still doesn't seem to like
it. Can you generate a new certificate and see if you still find
differences?


Enrico

-- 
GPG key: 4096R/634F4BD1E7AD5568 2009-05-08 Enrico Zini 


signature.asc
Description: PGP signature

Re: Help, I broke sso.debian.org for chrome

[Christoph Berg]

Re: Enrico Zini 2017-09-05 <20170905163334.2mi5tzacykzja...@enricozini.org>
> I should have managed to do it, but chrome still doesn't seem to like
> it. Can you generate a new certificate and see if you still find
> differences?

"openssl x509 -text -noout" doesn't show any differences anymore
except for the obvious parts (serial, validity, modulus and sig algo).

One bit that might or might not be relevant is that the CA certificate
was re-issued on Aug 3rd:

/srv/sso.debian.org/etc $ openssl x509 -text -noout < debsso.crt 
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN = SSO CA 2015-08-21, O = Debian SSO client certificate
Validity
Not Before: Aug  3 06:08:36 2017 GMT
Not After : Dec 31 23:59:59  GMT
Subject: CN = SSO CA 2015-08-21, O = Debian SSO client certificate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:d5:25:0c:36:21:15:32:5c:9c:c0:33:e5:26:18:
...
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Subject Key Identifier: 
D0:E2:7E:26:81:E0:CD:AA:CB:34:5F:B6:7A:26:B2:D7:51:82:93:8E
X509v3 CRL Distribution Points: 

Full Name:
  URI:https://sso.debian.org/spkac/ca.crl

Signature Algorithm: sha256WithRSAEncryption
 1c:4c:87:05:8d:51:79:04:7e:c5:a5:9a:4f:bf:15:1b:ee:b1:
 ...

This file is the one distributed to participating servers, so if
there's something wrong, it will have "infected" the other hosts as
well. I can't see anything wrong there either, though...

Starting with a blank chromium config (.config/chromium + .pki/nssdb)
and importing the client there doesn't help either.

Christoph

Removing Qt4 in Buster

[Lisandro Damián Nicanor Pérez Meyer]

Hi everyone! This is the required notice before starting with the mass bug 
filling in order to *try* to remove Qt4 in Buster.

You can see the announcement here:



We have a wiki for tracking the status in 

I'm attaching a list of DDs involved.

Thanks!

-- 
Combata las características. Si una característica no es absolutamente
esencial, descártela, especialmente si tiene el mismo efecto que se
puede alcanzar mediante la combinación de otras características.
  Andrew S. Tanenbaum, de su libro "Computer Networks"

Lisandro Damián Nicanor Pérez Meyer
http://perezmeyer.com.ar/
http://perezmeyer.blogspot.com/
"Antoine Beaupré" 
   qthid-fcd-controller (U)

A. Maitland Bottoms 
   gnuradio
   gr-fosphor
   gr-radar
   qthid-fcd-controller

Abhijith PA 
   cortina

Adrian Knoth 
   kmidimon (U)
   libdrumstick (U)

Alberto Luaces Fernández 
   openscenegraph (U)

Alejandro Garrido Mota 
   nomnom

Alessio Treglia 
   ams (U)
   dssi (U)
   kmetronome (U)
   libdrumstick (U)
   muse (U)
   mustang-plug (U)
   radium-compressor (U)
   suil (U)
   v4l2ucp

Alexander GQ Gerasiov 
   qxmlrpc

Alexander Rodin 
   qstardict

Alexander Sack 
   ntrack

Alexander Sack 
   gnash (U)

Alice Ferrazzi 
   daemonfs

Andreas Beckmann 
   i7z

Andreas Metzler 
   pfstools (U)

Andreas Tille 
   ball (U)
   bppphyview (U)
   clonalframe (U)
   clustalx (U)
   edfbrowser (U)
   freemedforms-project (U)
   imagevis3d (U)
   libbpp-qt (U)
   liborigin2 (U)
   libquazip (U)
   otb (U)
   qtiplot (U)
   qwtplot3d (U)
   rlplot (U)
   sofa-framework (U)

Andrew Ross 
   plplot

Andrew Shadura 
   postbooks (U)
   postbooks-updater (U)
   wpa (U)

Anibal Monsalve Salazar 
   pcp (U)

Anthony Fok 
   golang-github-yosssi-ace (U)
   txtreader (U)

Anton Gladky 
   libqglviewer (U)
   liggghts (U)
   paraview (U)
   pivy (U)
   qtiplot (U)
   soqt (U)
   woo (U)

Anton Gladky 
   freemat (U)

Antti Järvinen 
   qemuctl

Arnaud Cornet 
   gnudoq

Arnout Engelen 
   kmetronome (U)
   libdrumstick (U)
   stretchplayer (U)

Aron Xu 
   fcitx (U)

Axel Beckert 
   amora-server
   evolvotron

Barak A. Pearlmutter 
   mldemos
   stopmotion

Bareos Packaging Team 
   bareos

Barry deFreese 
   attal (U)

Bart Martens 
   kcheckers

Bas Zoetekouw 
   edfbrowser (U)

Bastien Roucariès 
   kbibtex (U)

Benda Xu 
   scim (U)

Benjamin Drung 
   esperanza

Benjamin Mesing 
   packagesearch

Bernd Zeimetz 
   gmic
   gpsbabel
   gpsd
   zbar

Bjoern Erik Nilsen 
   stopmotion (U)

Boris Pek 
   eiskaltdcpp
   psi-plus-l10n
   qpxtool
   yagf

Carsten Leonhardt 
   bacula (U)

Changwoo Ryu 
   qimhangul (U)

ChangZhuo Chen (陳昌倬) 
   codequery
   gcin (U)
   hime (U)

Charles Plessy 
   clustalx (U)

Charlie Smotherman 
   openteacher

Chase Douglas 
   rinputd

Christian M. Amsüss 
   opencsg

Christian Metscher 
   noblenote (U)

Christian Perrier 
   openambit (U)

Christian T. Steigies 
   gle-graphics (U)

Christoph Egger 
   katarakt

Christoph Martin 
   tipp10

Christophe Prud'homme 
   paraview (U)

Clay Weber 
   libalkimia (U)

Colin Tuckley 
   unixcw (U)

Cédric Boutillier 
   qtruby (U)

Daniel Echeverry 
   ophcrack (U)

Daniel Gimpelevich 
   pianobooster (U)

Daniel Leidert 
   shelxle (U)

Daniel Pocock 
   postbooks (U)
   postbooks-updater (U)

Daniel Schepler 
   qtads

Dariusz Dwornikowski 
   openpref (U)

David Palacio 
   qtruby (U)
   smokegen (U)
   smokeqt (U)

David Paleino 
   alt-key
   comparepdf
   diffpdf
   gambas3 (U)
   webkit-image

Dean Evans 
   auralquiz (U)

Debian Accessibility Team 
   qt-at-spi

Debian ACE+TAO maintainers 
   ace

Debian Astronomy Team 
   linguider

Debian Bacula Team 
   bacula

Debian Chinese Team 
   txtreader

Debian Edu Packaging Team 
   lmms

Debian Electronics Packaging Team 

   pulseview

Debian Flash Team 
   gnash

Debian Fonts Task Force 
   ttfautohint (U)

Debian Forensics 
   guymager
   libguytools2

Debian Games Team 
   alsoft-conf
   attal
   auralquiz
   doomsday
   hedgewars
   openpref
   pianobooster
   pokerth
   qjoypad
   yabause

Debian GIS Project 
   otb

Debian Go Packaging Team 
   golang-github-yosssi-ace

Debian Hamradio Maintainers 
   hamfax
   linpsk
   unixcw

Debian Hams group 
   wsjtx

Debian KDE Extras Team 
   amarok
   appmenu-qt
   gammaray
   hupnp
   kalternatives
   kdesudo
   keurocalc
   komparator
   krename
   kscope
   kvpnc
   libalkimia
   lightdm-kde
   robojournal
   soundkonverter
   telepathy-qt
   tora

Debian Kolab Maintainers 
   libkolabxml

Debian Korean L10N 
   qimhangul

Debian Krap Maintainers 
   libdbusmenu-qt

Debian LEGO Team 
   leocad

Debian Med Packaging Team 
   ball
   bppphyview
   camp
   clonalframe
   clustalx
   edfbrowser
   freemedforms-project
   imagevis3d
   libbpp-qt
   libquazip
   sofa-framework

Debian Multimedia Maintainers 

   abgate
   ams
   cantata
   dgedit
   dssi
   faustworks
   ffdiap

Re: Help needed for #871234 FTBFS with GCC-7: error: type/value mismatch

[Jeff Epler]

On Tue, Sep 05, 2017 at 01:55:58PM +0200, Alex Mestiashvili wrote:
> GHash.hh:91:44: error: type/value mismatch at argument 1 in template
> parameter list for 'template struct std::hash'
>  while (pos

Re: Help needed for #871234 FTBFS with GCC-7: error: type/value mismatch

[Alex Mestiashvili]

On Tue, Sep 5, 2017 at 8:44 PM, Jeff Epler  wrote:

> On Tue, Sep 05, 2017 at 01:55:58PM +0200, Alex Mestiashvili wrote:
> > GHash.hh:91:44: error: type/value mismatch at argument 1 in template
> > parameter list for 'template struct std::hash'
> >  while (pos
> Nothing in this line is intended to be a template parameter list, but it
> looks like gcc has decided something is; maybe it's "hash", which the
> compiler treats as std::hash due to e.g., an earlier "using" statement.
>
> If so, consider trying
>while (pos^ parenthesize ^
> so that the "<" can't introduce a template parameter list.
>
> My mental model of the C++ grammar doesn't explain to me why the
> compiler thinks this "<" can introduce a template parameter list, but
> that sure seems to be what the compiler states it is doing.  Usually
> when g++ and I disagree about C++ grammar, g++ is right...
>
> Jeff
>

Great! this solved the problem. Thank you very much!

Alex

Re: Mail templates

[Don Armstrong]

On Tue, 29 Aug 2017, Ana Guerrero Lopez wrote:
> I replied this email off-list. In the publicity team we have started recently
> a git repo with email templates for replying this type of requests.
> We receive emails likes this often in pr...@debian.org and I'm sure we're
> not the only team.
> The git repo is at https://anonscm.debian.org/cgit/publicity/mails.git/
> feel free to improve the existing emails, add translations and new emails.
> 
> Ana
> 
> 
> On Tue, Aug 29, 2017 at 09:19:23PM +0200, Anon Andme wrote:
> > Please stop sending emails to this address. I did not subscribe to this

For lists.debian.org lists, please just forward these e-mails to
listmas...@lists.debian.org.


-- 
Don Armstrong  https://www.donarmstrong.com

There are two types of people in this world, good and bad. The good
sleep better, but the bad seem to enjoy the waking hours much more.  
 -- Woody Allen

Re: Help, I broke sso.debian.org for chrome

[Anthony DeRobertis]

On Tue, Sep 05, 2017 at 02:08:38PM +0100, Ian Jackson wrote:
> 
> FYI, Enrico, the openssl CLI tool can dump this kind of thing so you
> can compare before and after.  I forget the exact runes I'm afraid.

openssl x509 -in <> -noout -text

is probably the magic line you're looking for.