Bug#594150: regression in apt-transport-https interop with apt-cacher

2011-01-19 Thread Ramakrishnan Muthukrishnan
On Mon, Nov 22, 2010 at 5:01 AM, Simon McVittie wrote: > > According to Neil Williams and Daniel Silverstone (see > ), the bug is > probably in gnutls26, if anything; the curl bug that Daniel Stenberg recently > fixed was just obscuring t

Bug#594150: regression in apt-transport-https interop with apt-cacher

2010-11-24 Thread Simon McVittie
retitle 594150 "no useful error message if server attempts insecure renegotiation" reassign 594150 libcurl3-gnutls 7.21.0-1 found 594150 7.21.1-1 thanks On Wed, 24 Nov 2010 at 10:24:51 -0800, Johannes Ernst wrote: > On Nov 24, 2010, at 8:42, Simon McVittie wrote: > > The "regression" in squeeze i

Bug#594150: regression in apt-transport-https interop with apt-cacher

2010-11-24 Thread Johannes Ernst
On Nov 24, 2010, at 8:42, Simon McVittie wrote: > On Wed, 24 Nov 2010 at 07:52:49 -0800, Johannes Ernst wrote: >> Assuming this is the right diagnosis, I still think this is a bug: >> it can't take several people several months (like us on this thread) >> to figure out that some setting needs to

Bug#594150: regression in apt-transport-https interop with apt-cacher

2010-11-24 Thread Simon McVittie
On Wed, 24 Nov 2010 at 07:52:49 -0800, Johannes Ernst wrote: > Assuming this is the right diagnosis, I still think this is a bug: > it can't take several people several months (like us on this thread) > to figure out that some setting needs to be moved by two lines. Lots of > people will be upgradi

Bug#594150: regression in apt-transport-https interop with apt-cacher

2010-11-24 Thread Johannes Ernst
Assuming this is the right diagnosis, I still think this is a bug: it can't take several people several months (like us on this thread) to figure out that some setting needs to be moved by two lines. Lots of people will be upgrading their existing, working, Apache settings when migrating to sque

Bug#594150: regression in apt-transport-https interop with apt-cacher

2010-11-24 Thread Simon McVittie
On Tue, 23 Nov 2010 at 11:50:42 -0800, Johannes Ernst wrote: > Apologies that I didn't see this question earlier: > > http://apt-test.aviatis.com/ has now been updated with the Apache > configuration. Thank you! I think this is indeed fallout from CVE-2009-3555 (DSA-1394). Quoting from the DSA,

Bug#594150: regression in apt-transport-https interop with apt-cacher

2010-11-23 Thread Johannes Ernst
Apologies that I didn't see this question earlier: http://apt-test.aviatis.com/ has now been updated with the Apache configuration. On Nov 21, 2010, at 15:31, Simon McVittie wrote: > Johannes, how exactly are you running apt-cacher? Is it running as a CGI > or a standalone server or what? Could

Bug#594150: regression in apt-transport-https interop with apt-cacher

2010-11-23 Thread Andreas Metzler
On 2010-11-22 Simon McVittie wrote: [...] > On Sun, 14 Nov 2010 at 17:07:24 +, Neil Williams wrote: > > gnutls-cli --insecure -p 443 > > --x509certfile /etc/apt/client-certs/test-client.apt-test.aviatis.com.crt > > --x509keyfile /etc/apt/client-certs/test-client.apt-test.aviatis.com.key > > ap

Bug#594150: regression in apt-transport-https interop with apt-cacher

2010-11-21 Thread Simon McVittie
retitle 594150 regression in apt-transport-https interop with apt-cacher reassign 594150 gnutls26 thanks > My interest is in reducing the RC bug count to get squeeze released. > So let me ask the questions: > > 1. There was a minor bug in curl now fixed upstream and in github; is >there real