Your message dated Mon, 04 Jan 2016 17:48:52 +0000
with message-id <[email protected]>
and subject line Bug#808711: fixed in ca-certificates 20160104
has caused the Debian Bug report #808711,
regarding ca-certificates: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
808711: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=808711
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: ca-certificates
Version: 20150426
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: fileordering
X-Debbugs-Cc: [email protected]
Hi!
While working on the "reproducible builds" effort [1], we have noticed
that ca-certificates could not be built reproducibly.
It embeds an unsorted list of crt files in a config file.
The attached patch fixes this by sorting the list before it is embedded.
Regards,
Reiner
[1]: https://wiki.debian.org/ReproducibleBuilds
diff --git a/debian/rules b/debian/rules
index ddd7cee..fd4632b 100755
--- a/debian/rules
+++ b/debian/rules
@@ -44,7 +44,7 @@ install: build
$(MAKE) install DESTDIR=$(CURDIR)/debian/ca-certificates
(cd $(CURDIR)/debian/ca-certificates/usr/share/ca-certificates; \
crts=""; \
- for crt in $$(find . -type f -name '*.crt' -print); \
+ for crt in $$(find . -type f -name '*.crt' -print | LC_ALL=C sort); \
do \
crt=$$(echo $$crt | sed -e 's/\.\///'); \
if test "$$crts" = ""; then \
--- End Message ---
--- Begin Message ---
Source: ca-certificates
Source-Version: 20160104
We believe that the bug you reported is fixed in the latest version of
ca-certificates, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Shuler <[email protected]> (supplier of updated ca-certificates
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 04 Jan 2016 11:08:26 -0600
Source: ca-certificates
Binary: ca-certificates
Architecture: source all
Version: 20160104
Distribution: unstable
Urgency: medium
Maintainer: Michael Shuler <[email protected]>
Changed-By: Michael Shuler <[email protected]>
Description:
ca-certificates - Common CA certificates
Closes: 808711
Changes:
ca-certificates (20160104) unstable; urgency=medium
.
* debian/rules:
Sort certificate list for reproducible builds. Closes: #808711
* mozilla/certdata2pem.py:
Drop old CK*_NETSCAPE trust flag checks
Checksums-Sha1:
26e09276d3f42a110286054616560a6f19a3f1bd 1405 ca-certificates_20160104.dsc
4525a194736c6691dbd59fa87281b722837b4768 293632 ca-certificates_20160104.tar.xz
a02737cc818f63f7f4c8272ef1ab97abcd241644 199582
ca-certificates_20160104_all.deb
Checksums-Sha256:
2225db22cec974a89121390db30cbdd7dc1198f6f17fb508d9ef6d435984ae49 1405
ca-certificates_20160104.dsc
09eb770122e23260316120c0cbbddc8a1d33e7147210ce44e146084d5d5abcdd 293632
ca-certificates_20160104.tar.xz
ff3524b274038b53e2129c1cbc96b5078511e9214c5b3a2d5f5ea3dc59ca3abd 199582
ca-certificates_20160104_all.deb
Files:
4730883e571b3d76929bd4c6494be66a 1405 misc optional
ca-certificates_20160104.dsc
d9665a83d0d3ef8176a38e6aa20458e9 293632 misc optional
ca-certificates_20160104.tar.xz
742739143fe51b12fd60a9dd3e688dc0 199582 misc optional
ca-certificates_20160104_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQEcBAEBCAAGBQJWiq0YAAoJEFb2GnlAHawEE2AH/3+XdbzS3AkP5QbE2vgUXsyK
/TCVMPsxHq+LlIgml7ap4GWErlR1PVDu+YE4HhJrmC+ZZaJYTnxs4tJalkZJ5UV7
ZWn0XM8BA4bIO3XvES0vJQjSCSkF0HuB3Hd7wRd9qr/+5NRDGqK1TCBW5JhpZlsi
1jDQKevQ8jLOwQFXGm6GlJKb5QZTc1smcQQ1XWySPV13RApDyugt5fUPU+WoLDd4
rfkgt96jHKAKFlFgeglsGdcnE3f+0cp0MNp+m5hnI9GEVg1FDHWcMfSQu6iVf4yH
IECcA6Rt7RxRlh428vZWBZ3fn0lsEdIQFBMOHB3uuoG5qup7AdshAzAFy/p/j+I=
=hFsr
-----END PGP SIGNATURE-----
--- End Message ---
