Bug#996005: ca-certificates: fails upgrading when no new certs selected

2021-10-10 Thread Michael Shuler
l diff --git a/debian/changelog b/debian/changelog index 2a146c2..7b1e0bc 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,10 @@ +ca-certificates (20211010) UNRELEASED; urgency=medium + + [ Michael Shuler ] + * Fix error on install when TEMPBUNDLE missing. Closes: #996005 + + --

Bug#961907: Tagging Pending Bugs

2020-06-01 Thread Michael Shuler
tags 911289 + pending tags 955038 + pending tags 956411 + pending tags 961907 + pending thanks This commit on master is good to go to fix the above bugs in unstable - marking them pending: commit b3a8980b781bc9a370e42714a605cd4191bb6c0b Commit: Michael Shuler CommitDate: Mon Jun 1 14:38

Bug#895482: Fails to upgrade: installed ca-certificates package post-installation script subprocess returned error exit status 4

2018-12-20 Thread Michael Shuler
I've been able to test this error by creating a bogus symlink in /etc/ssl/certs and I committed a patch that removes any orphan symlinks, prior to running `openssl rehash`. https://salsa.debian.org/debian/ca-certificates/commit/cfe7064cb707ed2e8ac587877c1153029d46dc28 -- Kind regards, Michael.

Bug#895482: Bug#895473: Bug#895482: Fails to upgrade: installed ca-certificates package post-installation script subprocess returned error exit status 4

2018-06-21 Thread Michael Shuler
On 06/20/2018 04:33 PM, Sebastian Andrzej Siewior wrote: On 2018-06-13 08:19:32 [+0200], To Axel Beckert wrote: I asked upstream what they thing about ignoring these errors because the perl script does so. On the other hand what about cleaning up these dangling symlinks? ca-certificate maintai

Bug#895482: severity 895482 important

2018-06-10 Thread Michael Shuler
severity 895482 important thanks Dropped severity to allow testing migration. -- Michael

Bug#895482: Fails to upgrade: installed ca-certificates package post-installation script subprocess returned error exit status 4

2018-05-30 Thread Michael Shuler
On 05/30/2018 12:46 PM, Sebastian Andrzej Siewior wrote: I've read about this bug (and the other one) on d-devel. I uploaded recently a new version of openssl to unstable (1.1.0h-3)which changes the exit code of "openssl rehash" to zero in case of a duplicate or if a certificate can no be open.

Bug#895482: Fails to upgrade: installed ca-certificates package post-installation script subprocess returned error exit status 4

2018-04-16 Thread Michael Shuler
Thanks for the details. #895473 reported a similar error on locally installed CA certificates, which I think may be related. Each of the list of `rehash: skipping .. cannot open file` in your errors appears to be on CAs that were removed in the package during this update, so somewhere we have a pr

Bug#894295: ca-certificates fails to install: Execution of /usr/bin/c_rehash aborted due to compilation errors

2018-03-28 Thread Michael Shuler
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894282 This appears to be a bug in openssl with a new version to address the regression. -- Kind regards, Michael On 03/28/2018 09:07 AM, Helmut Grohne wrote: > Package: ca-certificates > Version: 20170717 > Severity: grave > Justification: fail

Bug#858539: should ca-certificates certdata.txt synchronize across all suites?

2017-07-19 Thread Michael Shuler
On 07/06/2017 11:13 PM, Paul Wise wrote: > On Fri, Jul 7, 2017 at 2:01 AM, Antoine Beaupré wrote: > >> For what it's worth, my opinion is that we should attempt to synchronize >> certdata.txt (and blacklist.txt, for that matter) across all suites (but >> not other changes to the packaging). This w

Bug#858539: ca-certificates: Contains untrusted StartCom and WoSign certificates

2017-05-19 Thread Michael Shuler
On 05/19/2017 10:07 AM, Chris Lamb wrote: > I've uploaded ca-certificates 20161130+nmu1 to DELAYED/5: > > ca-certificates (20161130+nmu1) unstable; urgency=medium > > * Non-maintainer upload. > * Add StartCom and WoSign certificates to mozilla/blacklist.txt as they > are > no

Bug#783615: "update-ca-certificates --fresh" doesn't correctly re-add certificates in /usr/local/share/ca-certificates

2017-01-20 Thread Michael Shuler
PU request sent! https://bugs.debian.org/852040 Thanks again, Michael

Bug#783615: "update-ca-certificates --fresh" doesn't correctly re-add certificates in /usr/local/share/ca-certificates

2017-01-18 Thread Michael Shuler
On 01/18/2017 03:25 PM, Adrian Bunk wrote: > after a discussion with someone who ran into this bug in stable I have > set the severity to serious, since this should IMHO also be fixed in > stable. This does look like a good patch to backport to stable. I'll get this commited to git and work on a

Bug#694888: Bug#698538: ca-certificates_20130119, ca-certificates-java_20121112+nmu1 - unblock together

2013-01-21 Thread Michael Shuler
On 01/21/2013 11:58 AM, Andreas Beckmann wrote: >> When allowing ca-certificates[-java] to migrate to wheezy, please, allow >> them together so they are installable: > > If dependencies are set up correctly, britney won't migrate only half of > the packages if that leads to an uninstallable state.

Bug#537051: ca-certificates: Unneeded and confusing usage of interest-noawait

2013-01-19 Thread Michael Shuler
On 01/19/2013 10:41 AM, Guillem Jover wrote: > As discussed in 537051 the NMU introduced an unneeded and confusing > usage of interest-noawait, and the accompanying Pre-Depends on dpkg. > The attached patch removes these. Thanks for the patch. I'll get this tested out as soon as I can and get an

Bug#537051: Add no-await trigger support and Breaks to fix ca-certificates-java breakage

2012-11-29 Thread Michael Shuler
On 11/29/2012 10:48 AM, Don Armstrong wrote: > I've actually tested this, and it hasn't been a problem. I suppose the > only way you could get it to be one is if you were manually using > dpkg. If that's really the case, then it basically means that no > package in wheezy can use the noawait trigge

Bug#687693: closing 687693

2012-11-05 Thread Michael Shuler
close 687693 thanks I forgot to mark this done in last message. -- Michael -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#687693: ca-certificates: Cacert License is missing

2012-11-04 Thread Michael Shuler
ying to think like an attorney, and a good laugh helps, too. I really appreciate your insight, Steve. -- Warm regards, Michael Shuler signature.asc Description: OpenPGP digital signature

Bug#687693: ca-certificates: Cacert License is missing

2012-11-04 Thread Michael Shuler
I meant to include a note that I'm fine with not removing CAcert from ca-certificates, as long as there is consensus with a) include the license in d/copyright, or b) ignore it (for now). We can work on this after wheezy, when we can add another package, if that is what we need to do. Sorry if th

Bug#687693: ca-certificates: Cacert License is missing

2012-11-04 Thread Michael Shuler
On 11/03/2012 08:15 PM, Steve Langasek wrote: > On Sat, Nov 03, 2012 at 03:28:08PM -0500, Michael Shuler wrote: >> After reading the -legal thread, comments above, the CAcert mailing list >> thread, the Fedora explanation, and carefully reading the licensing >> myself, the cau

Bug#690204: ca-certificates{, -java}: many errors during squeeze->wheezy upgrades, probably related to configuration order and update.d/

2012-10-11 Thread Michael Shuler
merge 690204 537051 thanks Same errors in the attached log during a squeeze to wheezy dist-upgrade. However, immediately following the dist-upgrade, re-running 'update-ca-certificates --fresh' completes successfully and sets up the java keystore properly. In all cases, the end of the ca-certifica

Bug#682125: ca-certificates: removes directories that were installed by another package: /etc/ssl/certs/

2012-07-21 Thread Michael Shuler
edful. Or you could pull ca-certificates_20120721 from my repository and report back that it passes, perhaps? http://www.pbandjelly.org/debian/ca-certificates_20120721_all.deb -- Kind regards, Michael Shuler diff --git a/debian/changelog b/debian/changelog index 7736538..89d7d03 100644 --

Bug#682125: ca-certificates: removes directories that were installed by another package: /etc/ssl/certs/

2012-07-20 Thread Michael Shuler
f/confmodule; then . /usr/share/debconf/confmodule (master)mshuler@mana:~/repos/git/ca-certificates$ -- In looking at #316521, I can understand this might be the problem. I'll test out what happens with no explicit rmdir's in postinst and let dpkg deal with the content

Bug#682125: ca-certificates: removes directories that were installed by another package: /etc/ssl/certs/

2012-07-19 Thread Michael Shuler
Thanks for the bug report, Andreas. I'll get this updated and tested as soon as I can. Kind regards, Michael Shuler signature.asc Description: OpenPGP digital signature

Bug#647849: ca-certificates: removal of signet.pl's CAs

2011-12-05 Thread Michael Shuler
tags 647849 + pending thanks On 11/19/2011 04:55 AM, Thijs Kinkhorst wrote: > Given that all the CRL's have expired for years it does seem good to remove > them from the next upload of ca-certificates. > > I'm not sure about the necessity of stable updates. While it indeed seems to > have gone

Bug#623882: error installing certs with non-ascii characters in their names

2011-10-28 Thread Michael Shuler
Hello Miles, I just wanted to let you know that Debian bug #623882 was closed by a merge with the fixed bug #623671 in ca-certificates-java. -- Kind regards, Michael Shuler -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Troubl

Bug#546629: thank you

2009-09-15 Thread Michael Shuler
nginx_0.6.32-3+lenny2+b1_i386 installs fine Thanks to all for the rebuild and quick release. Kind regards, Michael -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#546629: nginx_0.6.32-3+lenny2_i386 uninstallable because of libpcre3 (>= 7.7)

2009-09-14 Thread Michael Shuler
Package: nginx Version: 0.6.32-3+lenny2 Severity: grave Justification: renders package unusable Security release of nginx on i386 is uninstallable (amd64 is ok on the 64-bit machines I have) mshu...@linode:~$ apt-cache policy nginx nginx: Installed: 0.6.32-3 Candidate: 0.6.32-3+lenny2 Vers