Bug#852040: jessie-pu: package ca-certificates/20141019+deb8u3

[Adam D. Barratt]

Control: tags -1 + pending

On Sat, 2017-04-29 at 01:27 +0200, Andreas Beckmann wrote:
> On 2017-04-28 18:53, Michael Shuler wrote:
> > On 04/28/2017 11:39 AM, Adam D. Barratt wrote:
> >> On Fri, 2017-04-28 at 00:58 +0200, Andreas Beckmann wrote:
> >>>
> >>> Attached is the combined debdiff of the commits backported by Michael
> >>> and me. I verified in piuparts that "running update-certificates without
> >>> hooks initially" now actually works as intended.
> >>
> >> That looks okay, thanks.
> >>
> >> Please feel free to upload, bearing in mind that the window for 8.8
> >> closes over the weekend.
> > 
> > Thank you so much. I'm sorry I've been ridiculously busy, and "I'll get
> > to it this weekend" repeatedly hasn't materialized for me.
> 
> Just built and uploaded.

Flagged for acceptance.

Regards,

Adam

Processed: Re: Bug#852040: jessie-pu: package ca-certificates/20141019+deb8u3

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + pending
Bug #852040 [release.debian.org] jessie-pu: package 
ca-certificates/20141019+deb8u3
Added tag(s) pending.

-- 
852040: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852040
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#852040: jessie-pu: package ca-certificates/20141019+deb8u3

[Andreas Beckmann]

On 2017-04-28 18:53, Michael Shuler wrote:
> On 04/28/2017 11:39 AM, Adam D. Barratt wrote:
>> On Fri, 2017-04-28 at 00:58 +0200, Andreas Beckmann wrote:
>>>
>>> Attached is the combined debdiff of the commits backported by Michael
>>> and me. I verified in piuparts that "running update-certificates without
>>> hooks initially" now actually works as intended.
>>
>> That looks okay, thanks.
>>
>> Please feel free to upload, bearing in mind that the window for 8.8
>> closes over the weekend.
> 
> Thank you so much. I'm sorry I've been ridiculously busy, and "I'll get
> to it this weekend" repeatedly hasn't materialized for me.

Just built and uploaded.


Andreas

Bug#852040: jessie-pu: package ca-certificates/20141019+deb8u3

[Michael Shuler]

On 04/28/2017 11:39 AM, Adam D. Barratt wrote:
> On Fri, 2017-04-28 at 00:58 +0200, Andreas Beckmann wrote:
>>
>> Attached is the combined debdiff of the commits backported by Michael
>> and me. I verified in piuparts that "running update-certificates without
>> hooks initially" now actually works as intended.
> 
> That looks okay, thanks.
> 
> Please feel free to upload, bearing in mind that the window for 8.8
> closes over the weekend.

Thank you so much. I'm sorry I've been ridiculously busy, and "I'll get
to it this weekend" repeatedly hasn't materialized for me.

-- 
Kind regards,
Michael

Bug#852040: jessie-pu: package ca-certificates/20141019+deb8u3

[Adam D. Barratt]

Control: tags -1 + confirmed

On Fri, 2017-04-28 at 00:58 +0200, Andreas Beckmann wrote:
> Control: tag -1 - moreinfo
> 
> On 2017-01-23 20:57, Michael Shuler wrote:
> > Thanks for the follow up. I'll get this fixed and resubmit a new debdiff
> > for stable update.
> 
> Attached is the combined debdiff of the commits backported by Michael
> and me. I verified in piuparts that "running update-certificates without
> hooks initially" now actually works as intended.

That looks okay, thanks.

Please feel free to upload, bearing in mind that the window for 8.8
closes over the weekend.

Regards,

Adam

Processed: Re: Bug#852040: jessie-pu: package ca-certificates/20141019+deb8u3

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + confirmed
Bug #852040 [release.debian.org] jessie-pu: package 
ca-certificates/20141019+deb8u3
Added tag(s) confirmed.

-- 
852040: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852040
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#852040: jessie-pu: package ca-certificates/20141019+deb8u3

[Andreas Beckmann]

Control: tag -1 - moreinfo

On 2017-01-23 20:57, Michael Shuler wrote:
> Thanks for the follow up. I'll get this fixed and resubmit a new debdiff
> for stable update.

Attached is the combined debdiff of the commits backported by Michael
and me. I verified in piuparts that "running update-certificates without
hooks initially" now actually works as intended.


Andreas


ca-certificates_20141019+deb8u3.dsc.diff
Description: application/pgp-keys

Processed: Re: Bug#852040: jessie-pu: package ca-certificates/20141019+deb8u3

[Debian Bug Tracking System]

Processing control commands:

> tag -1 - moreinfo
Bug #852040 [release.debian.org] jessie-pu: package 
ca-certificates/20141019+deb8u3
Removed tag(s) moreinfo.

-- 
852040: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852040
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#852040: jessie-pu: package ca-certificates/20141019+deb8u3

[Andreas Beckmann]

Control: tag -1 moreinfo

Hi Michael,

On Fri, 20 Jan 2017 16:38:30 -0600 Michael Shuler
 wrote:
> I would like to upload ca-certificates_20141019+deb8u3 to stable, in
> order to backport the fix from #783615 [0]. This bug was reopened and
> set to Serious severity. The debdiff is attached.

There is another commit thats needs to be backported to really fix
#825730 in jessie, too. Unfortunately that didn't work in
20141019+deb8u2. You should probably include this in your deb8u3
request, too.

Thanks


Andreas

PS: I just rebuilt branch debian-jessie from git + commit fd660d3b, that
seems to do it:

Selecting previously unselected package ca-certificates.
(Reading database ... 14923 files and directories currently installed.)
Preparing to unpack .../ca-certificates_20141019+deb8u3_all.deb ...
Unpacking ca-certificates (20141019+deb8u3) ...
Setting up ca-certificates (20141019+deb8u3) ...
Updating certificates in /etc/ssl/certs... 174 added, 0 removed; done.
Processing triggers for ca-certificates (20141019+deb8u3) ...
Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.ddone.

Bug#852040: jessie-pu: package ca-certificates/20141019+deb8u3

[Michael Shuler]

Package: release.debian.org
Severity: normal
Tags: jessie
User: release.debian@packages.debian.org
Usertags: pu

I would like to upload ca-certificates_20141019+deb8u3 to stable, in
order to backport the fix from #783615 [0]. This bug was reopened and
set to Serious severity. The debdiff is attached.

[0] https://bugs.debian.org/783615

-- 
Kind regards,
Michael
diffstat for ca-certificates-20141019+deb8u2 ca-certificates-20141019+deb8u3

 debian/changelog|7 +++
 sbin/update-ca-certificates |2 +-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff -Nru ca-certificates-20141019+deb8u2/debian/changelog 
ca-certificates-20141019+deb8u3/debian/changelog
--- ca-certificates-20141019+deb8u2/debian/changelog2016-11-18 
09:24:20.0 -0600
+++ ca-certificates-20141019+deb8u3/debian/changelog2017-01-20 
16:00:09.0 -0600
@@ -1,3 +1,10 @@
+ca-certificates (20141019+deb8u3) stable; urgency=medium
+
+  * sbin/update-ca-certificates:
+Update local certificates directory when calling --fresh. Closes: #783615
+
+ -- Michael Shuler   Wed, 18 Jan 2017 15:54:56 -0600
+
 ca-certificates (20141019+deb8u2) stable; urgency=medium
 
   [ Michael Shuler ]
diff -Nru ca-certificates-20141019+deb8u2/sbin/update-ca-certificates 
ca-certificates-20141019+deb8u3/sbin/update-ca-certificates
--- ca-certificates-20141019+deb8u2/sbin/update-ca-certificates 2016-11-18 
09:24:15.0 -0600
+++ ca-certificates-20141019+deb8u3/sbin/update-ca-certificates 2017-01-20 
16:00:09.0 -0600
@@ -89,7 +89,7 @@
   find . -type l -print | while read symlink
   do
 case $(readlink $symlink) in
-  $CERTSDIR*) rm -f $symlink;;
+  $CERTSDIR*|$LOCALCERTSDIR*) rm -f $symlink;;
 esac
   done
   find . -type l -print | while read symlink