Re: SSL Certificate error on debian.com

2016-03-31 Thread Paul Wise
On Fri, Apr 1, 2016 at 12:47 AM, Paul Wise wrote:

> Do you think it would be useful to have a cert for it despite that?

Adam answered off-list: no

> There is already a redirect from debian.com to debian.org in place.

Adam pointed out off-list that there wasn't for https links.

I have fixed this inconsistency in git and it will be live once puppet syncs.

https://anonscm.debian.org/cgit/mirror/dsa-puppet.git/tree/modules/roles/templates/apache-www.debian.org.erb

-- 
bye,
pabs

https://wiki.debian.org/PaulWise



Bug#815202: packages: machines and sponsors information is outdated

2016-03-31 Thread Paul Wise
On Fri, Apr 1, 2016 at 7:21 AM, Stéphane Blondon wrote:

> I don't know in which repository ./machines.cgi is (at least not in the
> website repo).

DSA would very much like to kill the existing codebase behind the
db.d.o website in favour of a rewrite in django:

https://github.com/Debian/ud

The existing codebase is available here:

https://anonscm.debian.org/cgit/mirror/userdir-ldap-cgi.git/tree/machines.cgi

-- 
bye,
pabs

https://wiki.debian.org/PaulWise



Bug#819664: Re-organise the CD / download pages to make them more useful

2016-03-31 Thread Paul Wise
On Fri, Apr 1, 2016 at 1:09 AM, Steve McIntyre wrote:

> Thoughts?

An overhaul of the getting Debian pages is indeed long overdue.

Adrian Gibanel had some great ideas about presentation of derivatives
stuff on the website, perhaps he has some about reorganising the
'getting Debian' section of the website. Adrian, the initial proposal
and discussion is available here:

https://bugs.debian.org/819664

I would drop mention of architectures and go with either the
multi-arch only ones 64-bit ones or an auto-detection system based on
User-Agent, JavaScript etc.

I would encourage a review of how the getting/download pages for other
operating systems (Windows/Mac/Android variants) and Free Software
distributions work.

Some ideas around verification and safety of getting Debian:

https://wiki.debian.org/Hardening/RepoAndImages

A couple of other sketches of how getting Debian pages could work:

http://get.debian.net/
http://debian-cd.debian.net/

There are some things that are missing from the getting Debian pages:

win32-loader
https://www.debian.org/blends/
https://wiki.debian.org/Cloud
https://wiki.debian.org/DebianHosting

Probably the FAQ could be eliminated by addressing most of the entries
in the text?

-- 
bye,
pabs

https://wiki.debian.org/PaulWise



Bug#762255: Some thoughts

2016-03-31 Thread Frank Lichtenheld
Hi.

I actually started looking into this today to see how much work it would be.

Some findings:

Writing a parser for DLAs is pretty simple, you can reuse a lot of the
stuff in parse-advisory.pl. If someone is interested, I can provide
the code.

The fun starts when you generate index.wml files. My thought was that
DSAs and DLAs should be mixed together since creating a completely
separate listing for them sounds silly. But it turns out that DSAs are
sorted by number and not by date (why, oh why?) and to change that you
actually need to touch get_recent_list
(english/templates/debian/recent_list.wml). This function is used
everywhere and has a lot of different calling conventions and a lot of
weird special handling and is just a horror to touch.

Maybe I will find some more motivation to look into it on the weekend.

Regards,
  Frank



Bug#815202: packages: machines and sponsors information is outdated

2016-03-31 Thread Stéphane Blondon


Le 29/03/2016 10:31, Frank Lichtenheld a écrit :
> On Sat, 20 Feb 2016 09:26:23 +0800 Paul Wise  wrote:
>> Some combination of
>> the description, purpose, sponsor and allowedGroups LDAP fields should
>> be enough to find the right hosts and display the right info. picconi
>> and pkgmirror-1and1 are the current hosts for this service.
> 
> Patches welcome ;)
> 


Sorry, it's not a patch...


Perhaps the script https://db.debian.org/machines.cgi could be a code
base. picconi and pkgmirror-1and1 are listed in this page:

"""
picconi.debian.org packages.debian.org master [...]
pkgmirror-1and1.debian.org packages.debian.org mirror [...]
"""

I don't know in which repository ./machines.cgi is (at least not in the
website repo).


-- 
Stéphane



signature.asc
Description: OpenPGP digital signature


Re: Please trigger website full rebuild (bugs.debian.org: https://www.debian.org/Bugs/server-control does not document "newcomer" tag)

2016-03-31 Thread Laura Arjona Reina
Hi

El 31/03/16 a las 23:04, Holger Wansing escribió:
> Ping ?
> 

I've had a look at https://www.debian.org/Bugs/index and in that file
the newcomer tag is present, but not in server-control

I've had a look at the Makefile and I don't understand it very well, but
it seems that index is built based on the pckgreport-opts.inc file:

index.$(LANGUAGE).html: $(TEMPLDIR)/template.wml
$(ENGLISHDIR)/Bugs/footer.inc \
  $(ENGLISHDIR)/Bugs/pkgreport-opts.inc

and server control not:

server-control.$(LANGUAGE).html: $(TEMPLDIR)/template.wml otherpages.inc
$(ENGLISHDIR)/Bugs/footer.inc

Could this be the reason?

I cannot trigger a complete rebuild, but I think that a complete rebuild
is done at least once a day?

I hope that other www friends can help better than me...

Best regards

> 
> 
> Holger Wansing  wrote:
>>
>> I have committed the fix yesterday, but it is still not visible on the
>> website.
>> Could someone trigger a full rebuild of the website, please?
>> This seems to be needed, to get the fix onto the webpages.
> 
> 
> 
> 


-- 
Laura Arjona Reina
https://wiki.debian.org/LauraArjona



Please trigger website full rebuild (bugs.debian.org: https://www.debian.org/Bugs/server-control does not document "newcomer" tag)

2016-03-31 Thread Holger Wansing
Ping ?



Holger Wansing  wrote:
> 
> I have committed the fix yesterday, but it is still not visible on the
> website.
> Could someone trigger a full rebuild of the website, please?
> This seems to be needed, to get the fix onto the webpages.




-- 

Created with Sylpheed 3.5.0 under
D E B I A N   L I N U X   8 . 0   " J E S S I E " .

Registered Linux User #311290 - https://linuxcounter.net/




Bug#819664: Re-organise the CD / download pages to make them more useful

2016-03-31 Thread Thomas Schmitt
Hi,

some texts which should be considered:

> * Verify your download

https://www.debian.org/CD/verify
https://www.debian.org/CD/faq/#verify

> * How to write to USB 

https://www.debian.org/CD/faq/#write-usb

> * How to write to optical media

https://www.debian.org/CD/faq/#record-unix
https://www.debian.org/CD/faq/#record-windows
https://www.debian.org/CD/faq/#record-mac

The overhaul should already prepare for the announced demise
of MD5 and SHA1.


Have a nice day :)

Thomas



Processed: tagging 422074

2016-03-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> # yes there are no changelogs for binNMUs that is intentional
> tags 422074 + wontfix
Bug #422074 [www.debian.org] packages.debian.org's changelogs for bin NMUs are 
broken
Added tag(s) wontfix.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
422074: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=422074
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: reassign 495329 to ftp.debian.org

2016-03-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> # actually nowadays it is ftp-masters job to provide changelogs
> reassign 495329 ftp.debian.org
Bug #495329 [www.debian.org] ftp.debian.org: (un)availability of package 
changelogs
Bug #679298 [www.debian.org] www.debian.org: Changelog of some packages are not 
found
Bug reassigned from package 'www.debian.org' to 'ftp.debian.org'.
Bug reassigned from package 'www.debian.org' to 'ftp.debian.org'.
Ignoring request to alter found versions of bug #495329 to the same values 
previously set
Ignoring request to alter found versions of bug #679298 to the same values 
previously set
Ignoring request to alter fixed versions of bug #495329 to the same values 
previously set
Ignoring request to alter fixed versions of bug #679298 to the same values 
previously set
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
495329: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495329
679298: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=679298
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: tagging 757943

2016-03-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> tags 757943 - patch
Bug #757943 [www.debian.org] please document the use of wml variables
Removed tag(s) patch.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
757943: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=757943
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: forcibly merging 722906 818367

2016-03-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> forcemerge 722906 818367
Bug #722906 [www.debian.org] Document additional methods for validating 
Debian-distributed files
Bug #818367 [www.debian.org] Publish complete CD image signing keys over HTTPS
Severity set to 'wishlist' from 'normal'
Merged 722906 818367
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
722906: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=722906
818367: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=818367
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#804271: marked as done (www,debian.org: Jigdo mirrors)

2016-03-31 Thread Debian Bug Tracking System
Your message dated Thu, 31 Mar 2016 18:41:21 +
with message-id 
and subject line Debian WWW CVS commit by djpig fixes #804271
has caused the Debian Bug report #804271,
regarding www,debian.org: Jigdo mirrors
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
804271: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804271
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: www,debian.org
Severity: wishlist



The instructions at

  https://www.debian.org/CD/jigdo-cd/#how

are simplicity itself but may I suggest an addition which might enhance
the use of jigdo. The advice is

  At the prompt "Debian mirror", enter http://ftp.XY.debian.org/debian/,
  where XY is the two-letter code for your country (for example, us, de,
  uk. See the current list of available ftp.XY.debian.org locations.)

Could we alter this to

  At the prompt "Debian mirror", enter either http://httpredir.debian.org
  or http://ftp.XY.debian.org/debian/, where XY is the two-letter code
  for your country (for example, us, de, uk. See the current list of
  available ftp.XY.debian.org locations). The first mirror is recommended
  for making best use of your bandwidth.

At the moment I am downloading DVD-4 and my line is maxed out. Very
impressive.

Regards,

Brian.



-- System Information:
Debian Release: 8.2
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.16.0-4-686-pae (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
--- End Message ---
--- Begin Message ---
This bug was closed by djpig in the webwml CVS repository:

https://www.debian.org/devel/website/using_cvs

Note that it might take some time until www.debian.org has been updated.

CVSROOT:/cvs/webwml
Module name:webwml
Changes by: djpig   16/03/31 18:41:20

Added files:
russian/News/2013: 20131214.wml 

Log message:
russian translation update

Modified files:
english/CD/jigdo-cd: index.wml 

Log message:
jigdo-cd: recommend using httpredir.debian.org (Closes: #804271)

As suggested by Brian Potkin.--- End Message ---


Bug#804286: marked as done (wwww.debian.org: Jigdo mirrors)

2016-03-31 Thread Debian Bug Tracking System
Your message dated Thu, 31 Mar 2016 18:41:21 +
with message-id 
and subject line Debian WWW CVS commit by djpig fixes #804271
has caused the Debian Bug report #804271,
regarding .debian.org: Jigdo mirrors
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
804271: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804271
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: .debian.org
Severity: wishlist


The instructions at 
  

  
  https://www.debian.org/CD/jigdo-cd/#how   
  

  
are simplicity itself but may I suggest an addition which might enhance 
  
the use of jigdo. The advice is 
  

  
  At the prompt "Debian mirror", enter http://ftp.XY.debian.org/debian/,
  
  where XY is the two-letter code for your country (for example, us, de,
  
  uk. See the current list of available ftp.XY.debian.org locations.)   
  

  
Could we alter this to  
  

  
  At the prompt "Debian mirror", enter either http://httpredir.debian.org   
  
  or http://ftp.XY.debian.org/debian/, where XY is the two-letter code  
  
  for your country (for example, us, de, uk. See the current list of
  
  available ftp.XY.debian.org locations). The first mirror is recommended   
  
  for making best use of your bandwidth.
  

  
At the moment I am downloading DVD-4 and my line is maxed out. Very 
  
impressive. 
  

  
Regards,
  

  
Brian.



-- System Information:
Debian Release: 8.2
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.16.0-4-686-pae (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
--- End Message ---
--- Begin Message ---
This bug was closed by djpig in the webwml CVS repository:

https://www.debian.org/devel/website/using_cvs

Note that it might take some time until www.debian.org has been updated.

CVSROOT:/cvs/webwml
Module name:webwml
Changes by: djpig   16/03/31 18:41:20

Added files:
russian/News/2013: 20131214.wml 

Log message:
russian translation update

Modified files:
english/CD/jigdo-cd: index.wml 

Log message:
jigdo-cd: recommend using httpredir.debian.org (Closes: #804271)

As suggested by Brian Potkin.--- End Message ---


Bug#819664: Re-organise the CD / download pages to make them more useful

2016-03-31 Thread Laura Arjona Reina
El 31/03/16 a las 19:09, Steve McIntyre escribió:
> Package: www.debian.org
> Severity: important
> 
> 
>  * Replace that link with a link to a simple "Download" page which
>gives *simple* instructions and links. This would be similar to
>what we have at https://www.debian.org/distrib/ , but we also need
>to re-org that page and make it prettier and clearer, add some
>graphics etc.:
> 
> Download Debian
> ===
> 
> Debian is [ ... ]
> 
>GRAPHIC 1  GRAPHIC 2
>(picture of installer) (picture of desktop)
>   * Download installer* Download live image
> ==  ===
>   + (link to m-a netinst?)  + link to favoured 64-bit image
>   + link to 64-bit netinst  + link to favoured 32-bit 
> image
>   + link to 32-bit netinst
>   + more... (link to page with + more... (link to page with
> more architecture options,   more architecture options,
> download options, etc.)  download options, etc.)
> 
>   (CENTERED, in a box?)
>  GRAPHIC 3
>  (picture of checksums / padlock etc.)
>   * Verify your download
> 
> (simple rationale and instructions,
>  link to page with more details)
> 
> GRAPHIC 4 GRAPHIC 5
>   (picture of USB stick)(picture of CD/DVD media)
>   * How to write to USB * How to write to optical media
> ===   =
> (simple instructions,   (simple instructions,
>  link to pages with more link to pages with more
>details)  details)
> 
>  * Re-organise all the other pages to act as the subsidiary pages
>mentioned here, removing the redundancy that's biting us and
>hurting users.
> 
> Thoughts?
> 
I like this proposal very much, and I'll put time to make it happen, if
others like it too.

Best regards

-- 
Laura Arjona Reina
https://wiki.debian.org/LauraArjona



Bug#819664: Re-organise the CD / download pages to make them more useful

2016-03-31 Thread Steve McIntyre
Package: www.debian.org
Severity: important

As pointed out in

  https://lists.debian.org/msgid-search/201603301121.25333.lisi.re...@gmail.com

, we may be giving links to download ISO images but we're not giving
*any* useful information about the checksums and signatures for those
images in pages like

  https://www.debian.org/releases/stable/debian-installer/

As we're trying to educate users to verify their downloads more, we
really need to do better here. For many (most?) people that page is
already a wall of text, so just adding more stuff there won't help.

>From other discussions with users in debian-user and elsewhere, I
think we actually have *too many* pages describing how to download
ISOs etc., and it's becoming a pain to keep up with them all and keep
them all updated in sync. It's very easy for people to find
outdated/misleading/confusing pages that put them off.

So, I'd like to suggest a new, much simplified strategy:

 * *Remove* the direct link on the front page to the multi-arch
   netinst I'd argue that we *don't* need a direct link on the front
   page, and it's a dis-service to users who may download it and then
   not know what to do to verify etc.

 * Replace that link with a link to a simple "Download" page which
   gives *simple* instructions and links. This would be similar to
   what we have at https://www.debian.org/distrib/ , but we also need
   to re-org that page and make it prettier and clearer, add some
   graphics etc.:

Download Debian
===

Debian is [ ... ]

 GRAPHIC 1  GRAPHIC 2
 (picture of installer) (picture of desktop)
  * Download installer  * Download live image
=====
+ (link to m-a netinst?)  + link to favoured 64-bit image
+ link to 64-bit netinst  + link to favoured 32-bit image
+ link to 32-bit netinst
+ more... (link to page with + more... (link to page with
  more architecture options,   more architecture options,
  download options, etc.)  download options, etc.)

  (CENTERED, in a box?)
   GRAPHIC 3
   (picture of checksums / padlock etc.)
  * Verify your download

(simple rationale and instructions,
 link to page with more details)

GRAPHIC 4 GRAPHIC 5
(picture of USB stick)(picture of CD/DVD media)
  * How to write to USB * How to write to optical media
===   =
(simple instructions, (simple instructions,
 link to pages with more   link to pages with more
 details)  details)

 * Re-organise all the other pages to act as the subsidiary pages
   mentioned here, removing the redundancy that's biting us and
   hurting users.

Thoughts?

-- 
Steve McIntyre, Cambridge, UK.st...@einval.com
"... the premise [is] that privacy is about hiding a wrong. It's not.
 Privacy is an inherent human right, and a requirement for maintaining
 the human condition with dignity and respect."
  -- Bruce Schneier



Free books from Amazon! Today only!

2016-03-31 Thread BuckGet



   
   Free books from Amazon! Today only!
   
#outlook a{padding:0;} /* Force Outlook to provide a 
"view in browser" button. */
body{width:100% !important;} .ReadMsgBody{width:100%;} 
.ExternalClass{width:100%;} /* Force Hotmail to display emails at full width */
body{-webkit-text-size-adjust:none;} /* Prevent Webkit 
platforms from changing default text sizes. */

body {margin:0; padding:0;}
img {border:0; outline:none; text-decoration:none;}
table td {border-collapse:collapse;}

h1, .h1{
color:#33 !important;
display:block;
font-family:Arial;
font-size:24px;
font-weight:bold;
line-height:100%;
margin-top:0;
margin-right:0;
margin-bottom:10px;
margin-left:0;
text-align:left;
}

h2, .h2{
color:#33 !important;
display:block;
font-family:Arial;
font-size:18px;
font-weight:bold;
line-height:100%;
margin-top:0;
margin-right:0;
margin-bottom:10px;
margin-left:0;
text-align:left;
}

h3, .h3{
color:#33 !important;
display:block;
font-family:Arial;
font-size:16px;
font-weight:bold;
line-height:100%;
margin-top:0;
margin-right:0;
margin-bottom:10px;
margin-left:0;
text-align:left;
}

h4, .h4{
color:#33 !important;
display:block;
font-family:Arial;
font-size:14px;
font-weight:bold;
line-height:100%;
margin-top:0;
margin-right:0;
margin-bottom:10px;
margin-left:0;
text-align:left;
}

h5, .h5{
color:#33 !important;
display:block;
font-family:Arial;
font-size:14px;
font-weight:bold;
line-height:100%;
margin-top:0;
margin-right:0;
margin-bottom:10px;
margin-left:0;
text-align:left;
}

div{
color:#66 !important;
font-family:Arial;
font-size:14px;
line-height:150%;
text-align:left;
}
   




















You're receiving this newsletter 
because you subscribed to our mailing list.

Not interested anymore? Unsubscribe 
from this newsletter. 

Re: SSL Certificate error on debian.com

2016-03-31 Thread Paul Wise
On Thu, Mar 31, 2016 at 10:51 PM, Adam Cadman wrote:

> If you go to https://www.debian.com/ you get an invalid certificate error -
> as the certificate has been issued for debian.org, not debian.com

Debian doesn't use debian.com so there isn't much point having a cert for it.

Do you think it would be useful to have a cert for it despite that?

> The content seems to be the same though, so if they are the same sites, why
> don't you just 501 redirect all traffic to www.debian.com to www.debian.org?

There is already a redirect from debian.com to debian.org in place.

-- 
bye,
pabs

https://wiki.debian.org/PaulWise



SSL Certificate error on debian.com

2016-03-31 Thread Adam Cadman
Hi,

If you go to https://www.debian.com/ you get an invalid certificate error -
as the certificate has been issued for debian.org, not debian.com

The content seems to be the same though, so if they are the same sites, why
don't you just 501 redirect all traffic to www.debian.com to www.debian.org?

Just one line in .htaccess will do it - unless there are pages that are
different on the two sites.

As well as getting rid of the rather unfriendly security warnings (how many
people leave when they see this?) it would also improve your search
results, as search engines will see the two sites as duplicate content.

Other than that, Debian is a great Linux distro!

Regards

Adam


Re: Link to Debian on http://www.w3.org/International/questions/qa-lang-priorities

2016-03-31 Thread ishida

On 30/03/2016 19:37, Holger Wansing wrote:

on your page http://www.w3.org/International/questions/qa-lang-priorities
there is a link to our Debian webpage "http://www.debian.org/intro/cn#mozilla";.

We have changed the relevant page, amongst other changes: sort browsers
alphabetically; see https://www.debian.org/intro/cn.en.html.
That means Mozilla is no longer at the top of the page.
Which is why I suggest you to change the link onto
https://www.debian.org/intro/cn#setting.


thanks, Holger.  Change made.

ri