l
diff --git a/debian/changelog b/debian/changelog
index 2a146c2..7b1e0bc 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+ca-certificates (20211010) UNRELEASED; urgency=medium
+
+ [ Michael Shuler ]
+ * Fix error on install when TEMPBUNDLE missing. Closes: #996005
+
+ --
tags 911289 + pending
tags 955038 + pending
tags 956411 + pending
tags 961907 + pending
thanks
This commit on master is good to go to fix the above bugs in unstable -
marking them pending:
commit b3a8980b781bc9a370e42714a605cd4191bb6c0b
Commit: Michael Shuler
CommitDate: Mon Jun 1 14:38
I've been able to test this error by creating a bogus symlink in
/etc/ssl/certs and I committed a patch that removes any orphan symlinks,
prior to running `openssl rehash`.
https://salsa.debian.org/debian/ca-certificates/commit/cfe7064cb707ed2e8ac587877c1153029d46dc28
--
Kind regards,
Michael.
On 06/20/2018 04:33 PM, Sebastian Andrzej Siewior wrote:
On 2018-06-13 08:19:32 [+0200], To Axel Beckert wrote:
I asked upstream what they thing about ignoring these errors because the
perl script does so. On the other hand what about cleaning up these
dangling symlinks?
ca-certificate maintai
severity 895482 important
thanks
Dropped severity to allow testing migration.
--
Michael
On 05/30/2018 12:46 PM, Sebastian Andrzej Siewior wrote:
I've read about this bug (and the other one) on d-devel. I uploaded
recently a new version of openssl to unstable (1.1.0h-3)which changes
the exit code of "openssl rehash" to zero in case of a duplicate or if a
certificate can no be open.
Thanks for the details. #895473 reported a similar error on locally
installed CA certificates, which I think may be related.
Each of the list of `rehash: skipping .. cannot open file` in your
errors appears to be on CAs that were removed in the package during this
update, so somewhere we have a pr
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894282
This appears to be a bug in openssl with a new version to address the
regression.
--
Kind regards,
Michael
On 03/28/2018 09:07 AM, Helmut Grohne wrote:
> Package: ca-certificates
> Version: 20170717
> Severity: grave
> Justification: fail
On 07/06/2017 11:13 PM, Paul Wise wrote:
> On Fri, Jul 7, 2017 at 2:01 AM, Antoine Beaupré wrote:
>
>> For what it's worth, my opinion is that we should attempt to synchronize
>> certdata.txt (and blacklist.txt, for that matter) across all suites (but
>> not other changes to the packaging). This w
On 05/19/2017 10:07 AM, Chris Lamb wrote:
> I've uploaded ca-certificates 20161130+nmu1 to DELAYED/5:
>
> ca-certificates (20161130+nmu1) unstable; urgency=medium
>
> * Non-maintainer upload.
> * Add StartCom and WoSign certificates to mozilla/blacklist.txt as they
> are
> no
PU request sent!
https://bugs.debian.org/852040
Thanks again,
Michael
On 01/18/2017 03:25 PM, Adrian Bunk wrote:
> after a discussion with someone who ran into this bug in stable I have
> set the severity to serious, since this should IMHO also be fixed in
> stable.
This does look like a good patch to backport to stable. I'll get this
commited to git and work on a
On 01/21/2013 11:58 AM, Andreas Beckmann wrote:
>> When allowing ca-certificates[-java] to migrate to wheezy, please, allow
>> them together so they are installable:
>
> If dependencies are set up correctly, britney won't migrate only half of
> the packages if that leads to an uninstallable state.
On 01/19/2013 10:41 AM, Guillem Jover wrote:
> As discussed in 537051 the NMU introduced an unneeded and confusing
> usage of interest-noawait, and the accompanying Pre-Depends on dpkg.
> The attached patch removes these.
Thanks for the patch. I'll get this tested out as soon as I can and get
an
On 11/29/2012 10:48 AM, Don Armstrong wrote:
> I've actually tested this, and it hasn't been a problem. I suppose the
> only way you could get it to be one is if you were manually using
> dpkg. If that's really the case, then it basically means that no
> package in wheezy can use the noawait trigge
close 687693
thanks
I forgot to mark this done in last message.
--
Michael
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
ying to think like
an attorney, and a good laugh helps, too.
I really appreciate your insight, Steve.
--
Warm regards,
Michael Shuler
signature.asc
Description: OpenPGP digital signature
I meant to include a note that I'm fine with not removing CAcert from
ca-certificates, as long as there is consensus with a) include the
license in d/copyright, or b) ignore it (for now). We can work on this
after wheezy, when we can add another package, if that is what we need
to do. Sorry if th
On 11/03/2012 08:15 PM, Steve Langasek wrote:
> On Sat, Nov 03, 2012 at 03:28:08PM -0500, Michael Shuler wrote:
>> After reading the -legal thread, comments above, the CAcert mailing list
>> thread, the Fedora explanation, and carefully reading the licensing
>> myself, the cau
merge 690204 537051
thanks
Same errors in the attached log during a squeeze to wheezy dist-upgrade.
However, immediately following the dist-upgrade, re-running
'update-ca-certificates --fresh' completes successfully and sets up the
java keystore properly.
In all cases, the end of the ca-certifica
edful. Or you could pull ca-certificates_20120721 from my
repository and report back that it passes, perhaps?
http://www.pbandjelly.org/debian/ca-certificates_20120721_all.deb
--
Kind regards,
Michael Shuler
diff --git a/debian/changelog b/debian/changelog
index 7736538..89d7d03 100644
--
f/confmodule; then
. /usr/share/debconf/confmodule
(master)mshuler@mana:~/repos/git/ca-certificates$
--
In looking at #316521, I can understand this might be the problem. I'll
test out what happens with no explicit rmdir's in postinst and let dpkg
deal with the content
Thanks for the bug report, Andreas. I'll get this updated and tested as
soon as I can.
Kind regards,
Michael Shuler
signature.asc
Description: OpenPGP digital signature
tags 647849 + pending
thanks
On 11/19/2011 04:55 AM, Thijs Kinkhorst wrote:
> Given that all the CRL's have expired for years it does seem good to remove
> them from the next upload of ca-certificates.
>
> I'm not sure about the necessity of stable updates. While it indeed seems to
> have gone
Hello Miles,
I just wanted to let you know that Debian bug #623882 was closed by a
merge with the fixed bug #623671 in ca-certificates-java.
--
Kind regards,
Michael Shuler
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Troubl
nginx_0.6.32-3+lenny2+b1_i386 installs fine
Thanks to all for the rebuild and quick release.
Kind regards,
Michael
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Package: nginx
Version: 0.6.32-3+lenny2
Severity: grave
Justification: renders package unusable
Security release of nginx on i386 is uninstallable (amd64 is ok on the 64-bit
machines I have)
mshu...@linode:~$ apt-cache policy nginx
nginx:
Installed: 0.6.32-3
Candidate: 0.6.32-3+lenny2
Vers
27 matches
Mail list logo