Your message dated Fri, 22 May 2026 23:08:25 +0000
with message-id <[email protected]>
and subject line Bug#1068388: fixed in debian-edu-config 2.13.0
has caused the Debian Bug report #1068388,
regarding Allow downloading www/Debian-Edu_rootCA.crt without HTTPS redirection.
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1068388: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068388
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: debian-edu-config
Version: 2.12.44~deb12u1
Severity: wishlist
While trying to download the CA root certificate for the Tjener, we discovered
that the Apache redirects us to use HTTPS.
One could instead use `curl -k` (to ignore the HTTPS certificate) but I think
it should work without HTTPS too.
Steps to reproduce:
curl http://10.0.2.2/Debian-Edu_rootCA.crt
```html
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a
href="https://www/Debian-Edu_rootCA.crt">here</a>.</p>
<hr>
<address>Apache/2.4.57 (Debian) Server at 10.0.2.2 Port 80</address>
</body></html>
```
--- End Message ---
--- Begin Message ---
Source: debian-edu-config
Source-Version: 2.13.0
Done: Mike Gabriel <[email protected]>
We believe that the bug you reported is fixed in the latest version of
debian-edu-config, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Mike Gabriel <[email protected]> (supplier of updated debian-edu-config
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 23 May 2026 00:45:16 +0200
Source: debian-edu-config
Architecture: source
Version: 2.13.0
Distribution: unstable
Urgency: medium
Maintainer: Debian Edu Developers <[email protected]>
Changed-By: Mike Gabriel <[email protected]>
Closes: 1068388 1126881
Changes:
debian-edu-config (2.13.0) unstable; urgency=medium
.
[ Mike Gabriel ]
* sbin/debian-edu-fsautoresize:
- Avoid division by zero error on unused mountpoints.
* sbin/debian-edu-pxeinstall:
- Support overriding tasksel/desktop selection via mydesktop parameter in
/etc/debian-edu/pxeinstall.conf.
- Fix comment about mapping debconf template keywords to kernel cmdline
keywords and drop unused variable assignment.
- sbin/debian-edu-pxeinstall: Regression fix, only adjust desktop to
mydesktop from pxeinstall.conf if we are processing the tasksel/desktop
setting.
* share/debian-edu-config/tools/copy-host-keytab:
- Support SSH publickey login to tjener, if this is possible (e.g. if admin
is using SSH agent forwarding).
.
[ Daniel Teichmann ]
* Add new file 'debian-edu-router.ldif'. Empty proxy groups should be
installed on all new Tjeners.
* ldap-bootstrap/debian-edu-router.ldif: Add 'server-hosts' nisNetgroup
to 'proxy-trusted' nisNetgroup, via 'memberNisNetgroup' attribute.
* share/debian-edu-config/gosa.conf.template: Activate nisNetgroup tab
for user accounts.
* apache2 debian-edu-default.conf: Do not force HTTPS on *.crt (including
Debian-Edu_rootCA.crt).
(Closes: #1068388)
* etc/dovecot/local.conf: Fix passdb block syntax for Dovecot 2.4.x
compatibility.
* debian/control: Add 'Conflicts: firefox-esr-mobile-config'.
(Closes: #1126881)
* v3CA.cnf: Fix Root CA X.509v3 extensions for OpenSSL 3 compatibility.
* v3.cnf: Fix server cert X.509v3 extensions for OpenSSL 3 compatibility.
* tools/create-debian-edu-certs: Fix script to apply correct configurations.
* tools/create-server-cert: Add OpenSSL 3 extensions and fix base config.
Checksums-Sha1:
0f6721f352b34e35f49d805a73add7d3e52f99b5 1978 debian-edu-config_2.13.0.dsc
27a4b69e0987f1f3c1de9b258a5c6803b065d780 361176 debian-edu-config_2.13.0.tar.xz
63ba28c466a6e71589e0986016966fccaef97849 6592
debian-edu-config_2.13.0_source.buildinfo
Checksums-Sha256:
e39131d48e8f06ca3b854c14d017981fa0cfa441666e9a801fb5d1a57bf45578 1978
debian-edu-config_2.13.0.dsc
93b41119e529d85b645a6f8b5f95bc3edc120a3408aba8e9fe0424f6410eb953 361176
debian-edu-config_2.13.0.tar.xz
b3fe8c605debc07319f43f66e50098a22545f8c1581aa98fd281fee683b87be6 6592
debian-edu-config_2.13.0_source.buildinfo
Files:
cf087b86ffd81cd64dc2f97e33fa5c01 1978 misc optional
debian-edu-config_2.13.0.dsc
65f80a51b61e011692c4f1ce7e97027f 361176 misc optional
debian-edu-config_2.13.0.tar.xz
f7f8cbddf57731c75bee1b54e03c6f73 6592 misc optional
debian-edu-config_2.13.0_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=tCrV
-----END PGP SIGNATURE-----
pgpwTcHz7dIAa.pgp
Description: PGP signature
--- End Message ---