Package: dpkg
Version: 1.16.8
Severity: important

Hi,

squeeze ships the conffile
/etc/X11/Xsession.d/70monkeysphere_use-validation-agent
(md5sum: 2e95953896510b58f2d1a8342936b088) in the monkeysphere package.
In wheezy this file is taken over by the msva-perl package and a new
variant is shipped (md5sum: 841956d191ba1d791c960d10607a9474)

The problem is, the md5sums in the Conffiles: entries are mixed up after
distupgrading from squeeze to wheezy and debsums reports a modified
conffile.

In squeeze before the upgrade:

# dpkg -s msva-perl
Package: msva-perl
Status: install ok installed
Priority: extra
Section: net
Installed-Size: 100
Maintainer: Daniel Kahn Gillmor <d...@fifthhorseman.net>
Architecture: all
Version: 0.3-1
Provides: monkeysphere-validation-agent
Depends: monkeysphere, libcrypt-x509-perl, libconvert-asn1-perl, 
libnet-server-perl, libhttp-server-simple-perl, libjson-perl, libparent-perl
Enhances: monkeysphere
Description: Cryptographic identity validation agent (Perl implementation)

# dpkg -s monkeysphere
Package: monkeysphere
Status: install ok installed
Priority: extra
Section: net
Installed-Size: 432
Maintainer: Jameson Rollins <jroll...@finestructure.net>
Architecture: all
Version: 0.31-4
Depends: gnupg, libcrypt-openssl-rsa-perl, libdigest-sha-perl, lockfile-progs | 
procmail, adduser
Recommends: netcat | socat, ssh-askpass, cron, openssh-client
Suggests: monkeysphere-validation-agent
Enhances: openssh-client, openssh-server
Conffiles:
 /etc/monkeysphere/monkeysphere-authentication.conf 
45ffebbf32c7aefcf2694e4601afa02c
 /etc/monkeysphere/monkeysphere.conf f6c1cee1a52fa89ae17197e4a56e71c8
 /etc/monkeysphere/monkeysphere-host.conf 697b23325bc5ee5b4c57886480273877
 /etc/X11/Xsession.d/70monkeysphere_use-validation-agent 
2e95953896510b58f2d1a8342936b088
Description: leverage the OpenPGP web of trust for SSH and TLS authentication

and in wheezy after the distupgrade:

# dpkg -s msva-perl
Package: msva-perl
Status: install ok installed
Priority: extra
Section: net
Installed-Size: 228
Maintainer: Daniel Kahn Gillmor <d...@fifthhorseman.net>
Architecture: all
Version: 0.8-2
Provides: monkeysphere-validation-agent
Depends: libcrypt-x509-perl, libconvert-asn1-perl, libnet-server-perl, 
libhttp-server-simple-perl, libjson-perl, libparent-perl, 
libgnupg-interface-perl (>= 0.42.02), libregexp-common-perl, 
libfile-homedir-perl, libconfig-general-perl
Recommends: libgtk2-perl, libanyevent-perl, liblinux-inotify2-perl, 
liburi-perl, libnet-ssleay-perl, libio-socket-ssl-perl (>= 1.37), libwww-perl
Suggests: liblwp-protocol-socks-perl
Conflicts: monkeysphere (<< 0.32)
Enhances: xul-ext-monkeysphere
Conffiles:
 /etc/X11/Xsession.d/70monkeysphere_use-validation-agent 
2e95953896510b58f2d1a8342936b088
Description: Cryptographic identity validation agent (Perl implementation)

# dpkg -s monkeysphere
Package: monkeysphere
Status: install ok installed
Priority: extra
Section: net
Installed-Size: 428
Maintainer: Jameson Rollins <jroll...@finestructure.net>
Architecture: all
Version: 0.35-2
Depends: gnupg (>= 1.4.10), libcrypt-openssl-rsa-perl, libdigest-sha-perl, 
lockfile-progs | procmail, adduser
Recommends: netcat | socat, ssh-askpass, cron, openssh-client
Suggests: monkeysphere-validation-agent
Enhances: openssh-client, openssh-server
Conffiles:
 /etc/monkeysphere/monkeysphere-authentication.conf 
8641c34b8202283588bebc0e20c51b75
 /etc/monkeysphere/monkeysphere-host.conf 697b23325bc5ee5b4c57886480273877
 /etc/monkeysphere/monkeysphere.conf 348530d6c1d6f0ccc13353ea84269606
 /etc/X11/Xsession.d/70monkeysphere_use-validation-agent 
841956d191ba1d791c960d10607a9474 obsolete
Description: leverage the OpenPGP web of trust for SSH and TLS authentication

The obsolete entry (in monkeysphere) has the correct md5sum,
while the new Conffiles entry in msva-perl uses the old one.

This may be cuased by only using a versioned Conflicts and no Replaces,
but whatever dpkg records in the statusfile is wrong.

Looking at the upgrade transcript we see:

  Setting up monkeysphere (0.35-2) ...
  Installing new version of config file 
/etc/monkeysphere/monkeysphere-authentication.conf ...
  Installing new version of config file /etc/monkeysphere/monkeysphere.conf ...
  Installing new version of config file 
/etc/X11/Xsession.d/70monkeysphere_use-validation-agent ...
  gpg: checking the trustdb
  Setting up msva-perl (0.8-2) ...

so at that point dpkg seems to believe that the conffile is still
belonging to monkeysphere.

A full piuparts upgrade log is attached to
#689790 (msva-perl modifies conffile during upgrade)


Andreas


-- 
To UNSUBSCRIBE, email to debian-dpkg-bugs-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to