Control: user debian-rele...@lists.debian.org
Control: usertag -1 +bsp-2018-12-ch-bern
Control: tags -1 +pending

Le jeudi, 3 mai 2018, 21.49:15 h CET Sebastian Andrzej Siewior a écrit :
> The new openssl 1.1.1 is currently in experimental [0]. This package
> failed to build against this new package [1] while it built fine against
> the openssl version currently in unstable [2].
> Could you please have a look?
> 
> The error
> 
> |OpenSSL.SSL.Error: [('SSL routines', 'SSL_CTX_use_certificate', 'ee key too
> |small')]
> is due to:
> 
> 1.1.1~~pre6-1 changelog):
> |   * Increase default security level from 1 to 2. This moves from the 80
> |   bit
> |   
> |     security level to the 112 bit securit level and will require 2048 bit
> |     RSA
> |     and DHE keys.

Indeed; regenerating the test-keys with 4096bit keys makes the build pass.

I just NMUed u1db with the attached debdiff.

Cheers,
    OdyX
diff -Nru u1db-13.10/debian/changelog u1db-13.10/debian/changelog
--- u1db-13.10/debian/changelog	2016-04-28 13:56:59.000000000 +0200
+++ u1db-13.10/debian/changelog	2018-12-02 15:46:45.000000000 +0100
@@ -1,3 +1,11 @@
+u1db (13.10-6.3) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Patch testsuite with regenerated 4096 bits RSA keys for OpenSSL 1.1 support
+    (Closes: 897651)
+
+ -- Didier Raboud <o...@debian.org>  Sun, 02 Dec 2018 15:46:45 +0100
+
 u1db (13.10-6.2) unstable; urgency=medium
 
   * Non-maintainer upload.
diff -Nru u1db-13.10/debian/patches/openssl-1.1-compatibility.patch u1db-13.10/debian/patches/openssl-1.1-compatibility.patch
--- u1db-13.10/debian/patches/openssl-1.1-compatibility.patch	1970-01-01 01:00:00.000000000 +0100
+++ u1db-13.10/debian/patches/openssl-1.1-compatibility.patch	2018-12-02 15:46:45.000000000 +0100
@@ -0,0 +1,374 @@
+Description: Replace old 1024bits certificates with 4096bits certificates for OpenSSL 1.1+ compatibility
+Author: Didier Raboud <o...@debian.org>
+Last-Update: 2018-12-02
+
+Bug-Debian: https://bugs.debian.org/897651
+
+--- a/u1db/tests/testing-certs/Makefile
++++ b/u1db/tests/testing-certs/Makefile
+@@ -13,7 +13,7 @@
+ 	echo 01>$(CATOP)/crlnumber
+ 	@echo '**** Making CA certificate ...'
+ 	openssl req -nodes -new \
+-	 	-newkey rsa -keyout $(CATOP)/private/cakey.pem \
++		-newkey rsa:4096 -keyout $(CATOP)/private/cakey.pem \
+ 		-out $(CATOP)/careq.pem \
+ 		-multivalue-rdn \
+         -subj "/C=UK/ST=-/O=u1db LOCAL TESTING ONLY, DO NO TRUST/CN=u1db testing CA"
+--- a/u1db/tests/testing-certs/cacert.pem
++++ b/u1db/tests/testing-certs/cacert.pem
+@@ -2,57 +2,121 @@
+     Data:
+         Version: 3 (0x2)
+         Serial Number:
+-            e4:de:01:76:c4:78:78:7e
+-    Signature Algorithm: sha1WithRSAEncryption
++            49:2a:ef:92:11:f4:d1:ce:24:7e:bd:26:a4:8a:74:20:7c:7a:67:5a
++        Signature Algorithm: sha256WithRSAEncryption
+         Issuer: C=UK, ST=-, O=u1db LOCAL TESTING ONLY, DO NO TRUST, CN=u1db testing CA
+         Validity
+-            Not Before: May  3 11:11:11 2012 GMT
+-            Not After : May  1 11:11:11 2023 GMT
++            Not Before: Dec  2 14:45:42 2018 GMT
++            Not After : Nov 29 14:45:42 2029 GMT
+         Subject: C=UK, ST=-, O=u1db LOCAL TESTING ONLY, DO NO TRUST, CN=u1db testing CA
+         Subject Public Key Info:
+             Public Key Algorithm: rsaEncryption
+-                Public-Key: (1024 bit)
++                RSA Public-Key: (4096 bit)
+                 Modulus:
+-                    00:bc:91:a5:7f:7d:37:f7:06:c7:db:5b:83:6a:6b:
+-                    63:c3:8b:5c:f7:84:4d:97:6d:d4:be:bf:e7:79:a8:
+-                    c1:03:57:ec:90:d4:20:e7:02:95:d9:a6:49:e3:f9:
+-                    9a:ea:37:b9:b2:02:62:ab:40:d3:42:bb:4a:4e:a2:
+-                    47:71:0f:1d:a2:c5:94:a1:cf:35:d3:23:32:42:c0:
+-                    1e:8d:cb:08:58:fb:8a:5c:3e:ea:eb:d5:2c:ed:d6:
+-                    aa:09:b4:b5:7d:e3:45:c9:ae:c2:82:b2:ae:c0:81:
+-                    bc:24:06:65:a9:e7:e0:61:ac:25:ee:53:d3:d7:be:
+-                    22:f7:00:a2:ad:c6:0e:3a:39
++                    00:af:51:11:ef:ce:49:b1:42:37:ef:60:e9:04:dd:
++                    c6:f9:d6:24:45:4c:30:f8:63:64:bc:df:67:ab:31:
++                    c5:8f:ec:c5:d3:85:68:4d:7e:43:ef:5b:c7:b0:1a:
++                    49:e4:93:a0:39:b0:18:bc:89:e2:fb:d0:aa:eb:58:
++                    53:09:af:d5:43:74:d0:83:ae:23:78:1e:1b:8a:b5:
++                    73:8e:fe:64:e1:ff:ea:96:89:b1:8d:22:8d:aa:45:
++                    ce:76:cb:23:e8:0b:b7:f2:4d:89:0c:75:ff:83:5f:
++                    d0:2c:cc:04:2e:0b:9d:f0:1e:21:9f:78:5e:a5:3d:
++                    9c:38:37:9d:e4:5a:e6:91:5f:78:f9:17:6f:f3:45:
++                    96:e7:39:8b:8c:41:38:59:f5:d5:07:a4:cb:ff:53:
++                    37:cc:a8:71:c9:97:4a:97:d2:61:27:ad:ec:a0:54:
++                    cf:3b:cc:8c:15:f8:e8:30:89:b3:fa:54:c1:b6:a3:
++                    e6:43:ca:fc:03:90:af:d2:92:50:ec:ba:5a:67:95:
++                    76:32:71:f6:fb:14:c3:38:99:9d:28:81:7c:b3:60:
++                    8e:3c:1f:92:f8:ab:83:c5:18:c7:d9:ab:ed:80:4e:
++                    04:e7:23:d0:31:be:10:9d:0d:99:34:f8:95:dd:1e:
++                    0f:0e:d9:d8:bf:d3:54:8e:58:e7:1a:a6:5a:c6:d1:
++                    1f:1b:89:8d:25:81:f2:a5:84:a2:ad:dc:3e:a1:d2:
++                    b0:37:e1:e9:7b:5b:93:e7:73:f4:26:99:f8:17:15:
++                    5f:64:27:29:6e:bb:ee:0e:a6:0c:2b:53:3c:08:c3:
++                    26:f1:33:38:af:55:0e:2d:4b:98:0c:e8:3a:e8:51:
++                    5c:78:97:66:d1:46:cb:4a:0f:7b:f9:2f:45:b7:4c:
++                    d8:48:00:84:8d:56:52:5c:f9:46:d9:51:1c:9a:d6:
++                    1b:fb:29:d0:b5:c2:83:f7:17:dd:41:fe:f9:7e:94:
++                    5b:ab:02:ca:ee:d4:a0:dc:bc:fc:71:7e:fc:dc:f4:
++                    f4:f3:c6:70:85:fa:10:07:01:c1:41:3f:7b:a2:0f:
++                    21:98:5b:8a:56:7c:62:79:82:9f:eb:83:8c:c3:3e:
++                    c2:bf:e4:4a:61:6c:4a:c1:0b:e8:e4:93:c8:58:3d:
++                    67:b3:f4:e8:f8:77:8f:0b:64:f6:72:dc:b6:49:41:
++                    94:a5:d9:5d:ed:83:b0:11:86:8b:fe:7d:af:59:00:
++                    4c:89:18:ce:21:be:f0:bb:44:2a:26:c1:0c:99:44:
++                    c1:c8:89:d0:3f:f4:5e:2a:29:78:13:cf:f7:db:9e:
++                    b2:13:17:86:4a:2f:70:b5:b1:b0:cb:81:39:ed:5c:
++                    fe:74:81:dd:a6:31:82:73:11:7f:37:89:b9:e6:63:
++                    ee:92:7d
+                 Exponent: 65537 (0x10001)
+         X509v3 extensions:
+             X509v3 Subject Key Identifier: 
+-                DB:3D:93:51:6C:32:15:54:8F:10:50:FC:49:4F:36:15:28:BB:95:6D
++                60:93:40:1F:F1:A5:92:41:24:3C:5E:AC:75:8E:FA:B5:3D:C4:B5:47
+             X509v3 Authority Key Identifier: 
+-                keyid:DB:3D:93:51:6C:32:15:54:8F:10:50:FC:49:4F:36:15:28:BB:95:6D
++                keyid:60:93:40:1F:F1:A5:92:41:24:3C:5E:AC:75:8E:FA:B5:3D:C4:B5:47
+ 
+-            X509v3 Basic Constraints: 
++            X509v3 Basic Constraints: critical
+                 CA:TRUE
+-    Signature Algorithm: sha1WithRSAEncryption
+-         72:9b:c1:f7:07:65:83:36:25:4e:01:2f:b7:4a:f2:a4:00:28:
+-         80:c7:56:2c:32:39:90:13:61:4b:bb:12:c5:44:9d:42:57:85:
+-         28:19:70:69:e1:43:c8:bd:11:f6:94:df:91:2d:c3:ea:82:8d:
+-         b4:8f:5d:47:a3:00:99:53:29:93:27:6c:c5:da:c1:20:6f:ab:
+-         ec:4a:be:34:f3:8f:02:e5:0c:c0:03:ac:2b:33:41:71:4f:0a:
+-         72:5a:b4:26:1a:7f:81:bc:c0:95:8a:06:87:a8:11:9f:5c:73:
+-         38:df:5a:69:40:21:29:ad:46:23:56:75:e1:e9:8b:10:18:4c:
+-         7b:54
++    Signature Algorithm: sha256WithRSAEncryption
++         31:d4:e5:6f:95:84:2c:9a:dd:fa:20:a0:b6:ba:1a:d1:e1:03:
++         bb:19:44:05:3b:1d:7e:48:a4:81:59:6f:8d:fb:5c:53:b5:f0:
++         f1:01:67:34:c9:2d:5c:ea:e8:90:e9:43:2a:2e:40:3f:c0:b7:
++         20:e7:c8:4c:6e:06:0e:ac:fa:de:6d:55:e6:a2:95:a9:4c:5d:
++         a8:f5:9a:f2:cb:af:6d:57:f1:a7:83:35:0e:6c:52:17:c7:4f:
++         4f:13:5c:ce:e7:61:5e:2c:e8:6c:67:15:75:d4:20:ca:b5:07:
++         75:c7:10:71:ca:56:b0:2e:e4:b2:bb:01:22:7f:9e:83:6c:8d:
++         55:00:8c:07:13:bf:ec:08:1d:e1:a2:76:39:f7:cd:6a:83:4d:
++         b7:3c:27:f4:74:54:f8:35:00:71:91:81:a0:32:e8:68:74:97:
++         27:eb:82:de:5b:4f:a5:b2:7b:8a:5f:09:d9:22:90:c9:4a:ac:
++         f4:ef:ea:22:f4:9d:ca:76:25:f7:76:c8:6c:c8:a4:ef:dd:02:
++         63:94:4d:57:21:c3:b7:52:d1:df:4d:ac:6b:4c:ef:17:68:e2:
++         04:e2:43:d9:c3:2a:7f:43:36:c5:de:c7:11:da:9c:8d:7c:00:
++         b8:2c:c8:52:ff:72:33:d6:28:40:ee:bb:45:0f:c2:8b:72:ce:
++         c5:68:60:7d:35:52:35:c4:e9:e9:0f:fb:b4:e2:c4:ce:ba:30:
++         2e:50:84:06:c7:55:be:bd:37:02:ee:72:28:4d:00:f2:a9:cc:
++         78:d8:4e:8a:4a:5b:97:bf:fa:2e:82:00:c8:4c:a0:3b:25:7b:
++         ee:da:56:f6:cf:4f:2a:c6:8c:cf:ec:bf:18:94:52:76:ad:2f:
++         8b:37:74:f6:99:c8:c8:53:fe:9f:85:2a:46:45:48:f2:26:64:
++         64:93:91:fe:12:c7:d6:58:9c:48:7c:5e:f5:5b:c1:b4:14:57:
++         fa:6b:f8:cf:d2:c9:9e:ce:56:64:7b:20:04:b4:78:91:2b:d6:
++         e1:7b:10:ba:24:0e:25:39:76:e4:ea:22:ef:24:94:ab:e1:21:
++         84:30:26:cd:8f:43:80:42:98:ec:d0:3a:19:07:01:23:02:f0:
++         3e:ce:3b:1f:52:f4:48:d6:19:01:4f:85:1c:7c:f5:cd:47:f8:
++         3d:8a:ef:42:8f:57:ee:ed:c6:ba:4a:7e:27:4f:71:18:d5:aa:
++         e3:27:22:d1:f2:e8:6b:16:23:2b:88:45:3d:4d:2b:a1:9c:47:
++         c0:b2:34:95:08:d3:5c:d1:a0:4b:ed:51:41:10:a8:da:06:32:
++         e6:a6:3a:bd:fb:20:dc:37:a4:02:97:21:4f:c3:5d:19:e3:e4:
++         30:bf:9e:db:4c:17:ca:21
+ -----BEGIN CERTIFICATE-----
+-MIICkjCCAfugAwIBAgIJAOTeAXbEeHh+MA0GCSqGSIb3DQEBBQUAMGIxCzAJBgNV
+-BAYTAlVLMQowCAYDVQQIDAEtMS0wKwYDVQQKDCR1MWRiIExPQ0FMIFRFU1RJTkcg
+-T05MWSwgRE8gTk8gVFJVU1QxGDAWBgNVBAMMD3UxZGIgdGVzdGluZyBDQTAeFw0x
+-MjA1MDMxMTExMTFaFw0yMzA1MDExMTExMTFaMGIxCzAJBgNVBAYTAlVLMQowCAYD
+-VQQIDAEtMS0wKwYDVQQKDCR1MWRiIExPQ0FMIFRFU1RJTkcgT05MWSwgRE8gTk8g
+-VFJVU1QxGDAWBgNVBAMMD3UxZGIgdGVzdGluZyBDQTCBnzANBgkqhkiG9w0BAQEF
+-AAOBjQAwgYkCgYEAvJGlf3039wbH21uDamtjw4tc94RNl23Uvr/neajBA1fskNQg
+-5wKV2aZJ4/ma6je5sgJiq0DTQrtKTqJHcQ8dosWUoc810yMyQsAejcsIWPuKXD7q
+-69Us7daqCbS1feNFya7CgrKuwIG8JAZlqefgYawl7lPT174i9wCircYOOjkCAwEA
+-AaNQME4wHQYDVR0OBBYEFNs9k1FsMhVUjxBQ/ElPNhUou5VtMB8GA1UdIwQYMBaA
+-FNs9k1FsMhVUjxBQ/ElPNhUou5VtMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEF
+-BQADgYEAcpvB9wdlgzYlTgEvt0rypAAogMdWLDI5kBNhS7sSxUSdQleFKBlwaeFD
+-yL0R9pTfkS3D6oKNtI9dR6MAmVMpkydsxdrBIG+r7Eq+NPOPAuUMwAOsKzNBcU8K
+-clq0Jhp/gbzAlYoGh6gRn1xzON9aaUAhKa1GI1Z14emLEBhMe1Q=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+ -----END CERTIFICATE-----
+--- /dev/null
++++ b/u1db/tests/testing-certs/demoCA/index.txt.old
+@@ -0,0 +1 @@
++V	291129144542Z		492AEF9211F4D1CE247EBD26A48A74207C7A675A	unknown	/C=UK/ST=-/O=u1db LOCAL TESTING ONLY, DO NO TRUST/CN=u1db testing CA
+--- a/u1db/tests/testing-certs/testing.cert
++++ b/u1db/tests/testing-certs/testing.cert
+@@ -2,26 +2,35 @@
+     Data:
+         Version: 3 (0x2)
+         Serial Number:
+-            e4:de:01:76:c4:78:78:7f
+-    Signature Algorithm: sha1WithRSAEncryption
++            49:2a:ef:92:11:f4:d1:ce:24:7e:bd:26:a4:8a:74:20:7c:7a:67:5b
++        Signature Algorithm: sha256WithRSAEncryption
+         Issuer: C=UK, ST=-, O=u1db LOCAL TESTING ONLY, DO NO TRUST, CN=u1db testing CA
+         Validity
+-            Not Before: May  3 11:11:14 2012 GMT
+-            Not After : May  1 11:11:14 2023 GMT
++            Not Before: Dec  2 14:45:50 2018 GMT
++            Not After : Nov 29 14:45:50 2029 GMT
+         Subject: O=u1db LOCAL TESTING ONLY, DO NOT TRUST, CN=localhost
+         Subject Public Key Info:
+             Public Key Algorithm: rsaEncryption
+-                Public-Key: (1024 bit)
++                RSA Public-Key: (2048 bit)
+                 Modulus:
+-                    00:c6:1d:72:d3:c5:e4:fc:d1:4c:d9:e4:08:3e:90:
+-                    10:ce:3f:1f:87:4a:1d:4f:7f:2a:5a:52:c9:65:4f:
+-                    d9:2c:bf:69:75:18:1a:b5:c9:09:32:00:47:f5:60:
+-                    aa:c6:dd:3a:87:37:5f:16:be:de:29:b5:ea:fc:41:
+-                    7e:eb:77:bb:df:63:c3:06:1e:ed:e9:a0:67:1a:f1:
+-                    ec:e1:9d:f7:9c:8f:1c:fa:c3:66:7b:39:dc:70:ae:
+-                    09:1b:9c:c0:9a:c4:90:77:45:8e:39:95:a9:2f:92:
+-                    43:bd:27:07:5a:99:51:6e:76:a0:af:dd:b1:2c:8f:
+-                    ca:8b:8c:47:0d:f6:6e:fc:69
++                    00:bd:e6:c5:41:d9:84:c8:dc:d1:16:4a:0c:fc:04:
++                    43:69:6f:08:a9:23:26:ad:6d:8c:a4:02:a9:a4:6c:
++                    cd:98:8e:cb:79:5e:a6:72:e7:d6:8e:6b:ad:fd:e2:
++                    6e:ce:ac:a2:ff:2a:bb:e2:4d:cd:82:1e:59:9b:8a:
++                    2c:99:ec:cd:a1:c1:e8:c7:55:24:95:00:6b:a2:c4:
++                    c3:35:fb:15:d1:3f:a9:1f:b8:6a:5a:45:5e:83:38:
++                    b9:fe:84:c7:1a:22:18:e0:3c:ba:01:31:69:41:e1:
++                    bf:b6:2e:8b:40:6a:14:85:6e:62:aa:a3:c1:1a:49:
++                    a0:89:e7:9d:bd:c1:b7:da:d4:44:ba:47:6d:cb:77:
++                    62:2b:53:d0:dd:04:ea:92:88:85:21:b8:3e:58:98:
++                    d2:a4:ab:e5:0b:e1:29:58:ad:80:2b:c7:5e:ea:b5:
++                    9b:cb:ed:bb:06:99:43:90:40:ed:2b:45:62:72:7f:
++                    82:e9:46:75:47:c9:4c:6a:6b:2e:0f:d6:4c:f9:25:
++                    ee:55:be:be:eb:61:3f:2f:04:cc:77:f1:61:d4:eb:
++                    69:83:49:18:62:87:a8:e9:1f:6c:17:20:e7:9e:6e:
++                    17:27:45:d5:0f:d7:a1:c1:a0:7b:48:7a:7a:a1:bc:
++                    f0:1b:28:08:ca:d1:67:ee:b1:fa:1f:8f:f7:81:55:
++                    4f:0d
+                 Exponent: 65537 (0x10001)
+         X509v3 extensions:
+             X509v3 Basic Constraints: 
+@@ -29,33 +38,65 @@
+             Netscape Comment: 
+                 OpenSSL Generated Certificate
+             X509v3 Subject Key Identifier: 
+-                1C:63:85:E1:1D:F3:89:2E:6C:4E:3F:FB:D0:10:64:5A:C1:22:6A:2A
++                37:67:AA:E4:37:97:97:11:94:B7:65:C9:21:01:C5:33:6B:97:2A:18
+             X509v3 Authority Key Identifier: 
+-                keyid:DB:3D:93:51:6C:32:15:54:8F:10:50:FC:49:4F:36:15:28:BB:95:6D
++                keyid:60:93:40:1F:F1:A5:92:41:24:3C:5E:AC:75:8E:FA:B5:3D:C4:B5:47
+ 
+-    Signature Algorithm: sha1WithRSAEncryption
+-         1d:6d:3e:bd:93:fd:bd:3e:17:b8:9f:f0:99:7f:db:50:5c:b2:
+-         01:42:03:b5:d5:94:05:d3:f6:8e:80:82:55:47:1f:58:f2:18:
+-         6c:ab:ef:43:2c:2f:10:e1:7c:c4:5c:cc:ac:50:50:22:42:aa:
+-         35:33:f5:b9:f3:a6:66:55:d9:36:f4:f2:e4:d4:d9:b5:2c:52:
+-         66:d4:21:17:97:22:b8:9b:d7:0e:7c:3d:ce:85:19:ca:c4:d2:
+-         58:62:31:c6:18:3e:44:fc:f4:30:b6:95:87:ee:21:4a:08:f0:
+-         af:3c:8f:c4:ba:5e:a1:5c:37:1a:7d:7b:fe:66:ae:62:50:17:
+-         31:ca
++    Signature Algorithm: sha256WithRSAEncryption
++         02:f3:dd:92:dc:f8:3e:80:9f:5f:5c:b2:c4:f1:30:f5:d9:d9:
++         78:28:7e:c1:21:9b:7a:bb:71:af:4d:9c:4e:db:b9:cb:4e:0a:
++         af:32:8f:b4:bc:a5:7e:69:64:d8:f0:8e:fd:6e:9d:88:36:89:
++         59:af:ea:4b:4d:1d:bd:4d:6e:cd:73:d4:59:b0:54:09:80:0d:
++         3e:dd:52:c4:fc:72:ca:bf:d7:f5:c1:17:9e:f2:22:db:33:dc:
++         cd:e0:d5:46:d9:73:26:d7:0f:15:4d:b1:00:f8:ad:d5:0c:01:
++         f8:d6:6e:fb:60:c4:be:63:8c:7d:51:90:88:7c:ca:42:a5:f9:
++         4f:ca:4a:8c:8e:67:5e:f9:a0:ef:9b:43:90:60:cd:46:5d:c3:
++         65:f7:58:bd:08:19:e6:f0:45:7b:bc:be:91:5f:89:f5:76:09:
++         06:ba:09:98:af:79:e5:1c:3c:db:62:91:c2:79:93:e4:4a:a4:
++         55:ea:b2:1b:75:29:8c:f8:92:ea:62:c4:fc:3e:4f:a3:b7:04:
++         53:ee:47:09:67:c5:09:04:74:5a:bc:0d:b9:a2:ac:c1:67:d9:
++         84:9e:e9:30:c9:9e:d0:c8:00:6e:69:a2:28:24:f4:ec:7a:c0:
++         82:9d:0a:59:d1:b1:6c:6d:b2:da:4f:c9:76:ca:a7:15:0b:13:
++         9a:e1:01:b3:8f:d1:31:aa:4c:85:fb:07:88:41:c1:e9:c9:9c:
++         3d:e2:5d:35:30:61:48:a5:72:d5:e5:a9:07:64:7a:4b:c1:af:
++         44:ab:c7:d2:46:aa:ab:4b:37:5b:c1:e5:f8:f2:39:05:6e:aa:
++         d4:da:64:4b:0f:cf:ee:8a:9b:b0:00:a7:f4:60:3f:cd:de:df:
++         90:21:66:77:c4:a3:ff:bb:94:70:d0:53:08:88:c3:f7:40:3c:
++         ac:64:bd:67:cd:49:bb:9f:26:97:19:55:72:b8:6e:d2:5f:53:
++         42:cd:59:b7:aa:0e:60:ca:15:20:a7:51:1c:b6:5e:91:0a:2f:
++         52:7b:85:bd:0f:b4:c7:34:3b:a0:87:ec:80:b8:d4:09:6c:51:
++         70:8c:e6:0c:0a:5f:c6:db:44:0f:77:72:93:47:ae:b5:92:3a:
++         f6:ce:35:20:e1:a9:74:a5:9d:f0:be:eb:05:18:28:93:3b:ac:
++         f1:05:40:79:71:97:37:e1:67:61:ac:0e:3f:24:a0:54:fb:6b:
++         82:b5:47:d7:cb:79:34:64:ea:d8:6a:29:4a:9d:21:52:85:b9:
++         54:fa:c5:aa:ce:45:3e:28:42:6d:fb:ec:06:ed:be:9f:de:bf:
++         26:05:fd:2b:5e:15:f9:d7:87:c8:47:84:0f:e8:ec:7f:c1:2a:
++         9a:41:18:ae:12:0d:13:df
+ -----BEGIN CERTIFICATE-----
+-MIICnzCCAgigAwIBAgIJAOTeAXbEeHh/MA0GCSqGSIb3DQEBBQUAMGIxCzAJBgNV
+-BAYTAlVLMQowCAYDVQQIDAEtMS0wKwYDVQQKDCR1MWRiIExPQ0FMIFRFU1RJTkcg
+-T05MWSwgRE8gTk8gVFJVU1QxGDAWBgNVBAMMD3UxZGIgdGVzdGluZyBDQTAeFw0x
+-MjA1MDMxMTExMTRaFw0yMzA1MDExMTExMTRaMEQxLjAsBgNVBAoMJXUxZGIgTE9D
+-QUwgVEVTVElORyBPTkxZLCBETyBOT1QgVFJVU1QxEjAQBgNVBAMMCWxvY2FsaG9z
+-dDCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxh1y08Xk/NFM2eQIPpAQzj8f
+-h0odT38qWlLJZU/ZLL9pdRgatckJMgBH9WCqxt06hzdfFr7eKbXq/EF+63e732PD
+-Bh7t6aBnGvHs4Z33nI8c+sNmeznccK4JG5zAmsSQd0WOOZWpL5JDvScHWplRbnag
+-r92xLI/Ki4xHDfZu/GkCAwEAAaN7MHkwCQYDVR0TBAIwADAsBglghkgBhvhCAQ0E
+-HxYdT3BlblNTTCBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUwHQYDVR0OBBYEFBxjheEd
+-84kubE4/+9AQZFrBImoqMB8GA1UdIwQYMBaAFNs9k1FsMhVUjxBQ/ElPNhUou5Vt
+-MA0GCSqGSIb3DQEBBQUAA4GBAB1tPr2T/b0+F7if8Jl/21BcsgFCA7XVlAXT9o6A
+-glVHH1jyGGyr70MsLxDhfMRczKxQUCJCqjUz9bnzpmZV2Tb08uTU2bUsUmbUIReX
+-Irib1w58Pc6FGcrE0lhiMcYYPkT89DC2lYfuIUoI8K88j8S6XqFcNxp9e/5mrmJQ
+-FzHK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+ -----END CERTIFICATE-----
+--- a/u1db/tests/testing-certs/testing.key
++++ b/u1db/tests/testing-certs/testing.key
+@@ -1,16 +1,28 @@
+ -----BEGIN PRIVATE KEY-----
+-MIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBAMYdctPF5PzRTNnk
+-CD6QEM4/H4dKHU9/KlpSyWVP2Sy/aXUYGrXJCTIAR/VgqsbdOoc3Xxa+3im16vxB
+-fut3u99jwwYe7emgZxrx7OGd95yPHPrDZns53HCuCRucwJrEkHdFjjmVqS+SQ70n
+-B1qZUW52oK/dsSyPyouMRw32bvxpAgMBAAECgYBs3lXxhjg1rhabTjIxnx19GTcM
+-M3Az9V+izweZQu3HJ1CeZiaXauhAr+LbNsniCkRVddotN6oCJdQB10QVxXBZc9Jz
+-HPJ4zxtZfRZlNMTMmG7eLWrfxpgWnb/BUjDb40yy1nhr9yhDUnI/8RoHDRHnAEHZ
+-/CnHGUrqcVcrY5zJAQJBAPLhBJg9W88JVmcOKdWxRgs7dLHnZb999Kv1V5mczmAi
+-jvGvbUmucqOqke6pTUHNYyNHqU6pySzGUi2cH+BAkFECQQDQ0VoAOysg6FVoT15v
+-tGh57t5sTiCZZ7PS8jwvtThsgA+vcf6c16XWzXgjGXSap4r2QDOY2rI5lsWLaQ8T
+-+fyZAkAfyFJRmbXp4c7srW3MCOahkaYzoZQu+syJtBFCiMJ40gzik5I5khpuUGPI
+-V19EvRu8AiSlppIsycb3MPb64XgBAkEAy7DrUf5le5wmc7G4NM6OeyJ+5LbxJbL6
+-vnJ8My1a9LuWkVVpQCU7J+UVo2dZTuLPspW9vwTVhUeFOxAoHRxlQQJAFem93f7m
+-el2BkB2EFqU3onPejkZ5UrDmfmeOQR1axMQNSXqSxcJxqa16Ru1BWV2gcWRbwajQ
+-oc+kuJThu/r/Ug==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+ -----END PRIVATE KEY-----
diff -Nru u1db-13.10/debian/patches/series u1db-13.10/debian/patches/series
--- u1db-13.10/debian/patches/series	2014-11-16 20:17:24.000000000 +0100
+++ u1db-13.10/debian/patches/series	2018-12-02 15:33:20.000000000 +0100
@@ -3,3 +3,4 @@
 CVE-2013-2099
 json_object_object_get
 adjust-for-libjson-c-dev
+openssl-1.1-compatibility.patch

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to