[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
--- Comment From mhart...@de.ibm.com 2022-05-11 12:18 EDT--- Verified on Ubuntu Jammy. $ genprotimg --version genprotimg version 2.20.0-build-20220413 Copyright IBM Corp. 2020 $ dpkg -s s390-tools Package: s390-tools ... Architecture: s390x Version: 2.20.0-0ubuntu3 ... --- Comment From boris.m...@de.ibm.com 2022-05-18 21:28 EDT--- Fix verified and released to -updates, hence closing the bug. Status change: ==> CLOSED. ** Tags removed: targetmilestone-inin--- ** Tags added: targetmilestone-inin2004 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
** Changed in: ubuntu-z-systems Status: Fix Committed => Fix Released ** Changed in: s390-tools-signed (Ubuntu) Status: Fix Committed => Fix Released ** Changed in: s390-tools-signed (Ubuntu Focal) Status: Fix Committed => Fix Released ** Changed in: s390-tools-signed (Ubuntu Impish) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
This bug was fixed in the package s390-tools - 2.12.0-0ubuntu3.5 --- s390-tools (2.12.0-0ubuntu3.5) focal; urgency=medium * d/p/78b0533-genprotimg-remove-DigiCert-root-CA-pinning.patch Fix for genprotimg failing to process z15 host key documents after April 2022. (LP: #1968260) * refreshed in total 14 patches in d/p to fix offset issues -- Frank Heimes Tue, 12 Apr 2022 08:26:57 +0200 ** Changed in: s390-tools (Ubuntu Focal) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
This bug was fixed in the package s390-tools - 2.17.0-0ubuntu2.1 --- s390-tools (2.17.0-0ubuntu2.1) impish; urgency=medium * d/p/78b0533-genprotimg-remove-DigiCert-root-CA-pinning.patch Fix for genprotimg failing to process z15 host key documents after April 2022. (LP: #1968260) * d/p/673ff37-genprotimg-check_hostkeydoc-relax-default-issuer-che.patch Fixing check_hostkeydoc since it's checking the certificate issuer too strictly. (LP: #1968259) -- Frank Heimes Mon, 11 Apr 2022 13:38:11 +0200 ** Changed in: s390-tools (Ubuntu Impish) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
Thx a lot Marc - adjusting updating the tags ... ** Tags removed: verification-needed-focal verification-needed-impish ** Tags added: verification-done-focal verification-done-impish -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
** Changed in: ubuntu-z-systems Status: In Progress => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
Hello bugproxy, or anyone else affected, Accepted s390-tools into focal-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/s390-tools/2.12.0-0ubuntu3.5 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed- focal to verification-done-focal. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification- failed-focal. In either case, without details of your testing we will not be able to proceed. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping! N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days. ** Changed in: s390-tools (Ubuntu Focal) Status: In Progress => Fix Committed ** Changed in: s390-tools-signed (Ubuntu Impish) Status: In Progress => Fix Committed ** Tags added: verification-needed-focal ** Changed in: s390-tools-signed (Ubuntu Focal) Status: In Progress => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
Hello bugproxy, or anyone else affected, Accepted s390-tools into impish-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/s390-tools/2.17.0-0ubuntu2.1 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed- impish to verification-done-impish. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification- failed-impish. In either case, without details of your testing we will not be able to proceed. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping! N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days. ** Changed in: s390-tools (Ubuntu Impish) Status: In Progress => Fix Committed ** Tags added: verification-needed verification-needed-impish -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
** Changed in: s390-tools (Ubuntu Focal) Assignee: (unassigned) => Graham Inggs (ginggs) ** Changed in: s390-tools (Ubuntu Impish) Assignee: (unassigned) => Graham Inggs (ginggs) ** Changed in: s390-tools-signed (Ubuntu Focal) Assignee: (unassigned) => Graham Inggs (ginggs) ** Changed in: s390-tools-signed (Ubuntu Impish) Assignee: (unassigned) => Graham Inggs (ginggs) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
** Changed in: s390-tools-signed (Ubuntu Jammy) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
This bug was fixed in the package s390-tools - 2.20.0-0ubuntu3 --- s390-tools (2.20.0-0ubuntu3) jammy; urgency=medium * No-change rebuild to match s390-tools-signed version -- Graham Inggs Wed, 13 Apr 2022 10:32:45 + ** Changed in: s390-tools (Ubuntu Jammy) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
uploaded new debdiff of the s390-tools-signed package for focal that incl. the needed d/c update ** Patch added: "debdiff_s390-tools-signed_2.12.0-0ubuntu3.4_to_2.12.0-0ubuntu3.5" https://bugs.launchpad.net/ubuntu/+source/s390-tools/+bug/1968260/+attachment/5580382/+files/debdiff_s390-tools-signed_2.12.0-0ubuntu3.4_to_2.12.0-0ubuntu3.5.diff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
uploaded new debdiff of the s390-tools-signed package for impish that incl. the needed d/c update ** Patch added: "debdiff_s390-tools-signed_2.17.0-0ubuntu2_to_2.17.0-0ubuntu2.1" https://bugs.launchpad.net/ubuntu/+source/s390-tools/+bug/1968260/+attachment/5580381/+files/debdiff_s390-tools-signed_2.17.0-0ubuntu2_to_2.17.0-0ubuntu2.1.diff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
uploaded new debdiff of the s390-tools-signed package for jammy that incl. the needed d/c update ** Patch removed: "s390-tools-signed debdiff for LP#1968259 and LP#1968260" https://bugs.launchpad.net/ubuntu/+source/s390-tools/+bug/1968260/+attachment/5578285/+files/debdiff_lp1968259+lp1968260_s390-tools-signed_patch_jammy.patch ** Patch removed: "s390-tools-signed debdiff for LP#1968259 and LP#1968259 / impish" https://bugs.launchpad.net/ubuntu/+source/s390-tools/+bug/1968260/+attachment/5579394/+files/debdiff_lp1968259+lp1968260_s390-tools-signed_sru_impish.patch ** Patch removed: "s390-tools-signed debdiff for LP#1968260 / focal" https://bugs.launchpad.net/ubuntu/+source/s390-tools/+bug/1968260/+attachment/5579798/+files/debdiff_lp1968260_s390-tools-signed_sru_focal.patch ** Merge proposal unlinked: https://code.launchpad.net/~fheimes/ubuntu/+source/s390-tools-signed/+git/s390-tools-signed/+merge/419283 ** Merge proposal unlinked: https://code.launchpad.net/~fheimes/ubuntu/+source/s390-tools/+git/s390-tools/+merge/419270 ** Patch added: "debdiff_s390-tools-signed_2.20-0ubuntu1_to_2.20-0ubuntu2" https://bugs.launchpad.net/ubuntu/+source/s390-tools/+bug/1968260/+attachment/5580380/+files/debdiff_s390-tools-signed_2.20-0ubuntu1_to_2.20-0ubuntu2.diff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
** Merge proposal unlinked: https://code.launchpad.net/~fheimes/ubuntu/+source/s390-tools-signed/+git/s390-tools-signed/+merge/419218 ** Merge proposal unlinked: https://code.launchpad.net/~fheimes/ubuntu/+source/s390-tools/+git/s390-tools/+merge/419200 ** Merge proposal unlinked: https://code.launchpad.net/~fheimes/ubuntu/+source/s390-tools-signed/+git/s390-tools-signed/+merge/419135 ** Merge proposal unlinked: https://code.launchpad.net/~fheimes/ubuntu/+source/s390-tools/+git/s390-tools/+merge/419052 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
** Changed in: s390-tools (Ubuntu Jammy) Status: In Progress => Fix Committed ** Changed in: s390-tools-signed (Ubuntu Jammy) Status: In Progress => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
** Changed in: s390-tools (Ubuntu Jammy) Assignee: Skipper Bug Screeners (skipper-screen-team) => Graham Inggs (ginggs) ** Changed in: s390-tools-signed (Ubuntu Jammy) Assignee: (unassigned) => Graham Inggs (ginggs) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
s390-tools-signed debdiff for LP#1968260 / focal ** Merge proposal linked: https://code.launchpad.net/~fheimes/ubuntu/+source/s390-tools-signed/+git/s390-tools-signed/+merge/419283 ** Patch added: "s390-tools-signed debdiff for LP#1968260 / focal" https://bugs.launchpad.net/ubuntu/+source/s390-tools-signed/+bug/1968260/+attachment/5579798/+files/debdiff_lp1968260_s390-tools-signed_sru_focal.patch ** Changed in: s390-tools (Ubuntu Focal) Status: New => In Progress ** Changed in: s390-tools-signed (Ubuntu Focal) Status: New => In Progress ** Changed in: ubuntu-z-systems Status: New => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
s390-tools debdiff for LP#1968260 / focal ** Patch added: "s390-tools debdiff for LP#1968260 / focal" https://bugs.launchpad.net/ubuntu/+source/s390-tools/+bug/1968260/+attachment/5579755/+files/debdiff_lp1968260_s390-tools_sru_focal.patch -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
** Merge proposal linked: https://code.launchpad.net/~fheimes/ubuntu/+source/s390-tools/+git/s390-tools/+merge/419270 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
s390-tools-signed debdiff for LP#1968259 and LP#1968259 / impish ** Patch added: "s390-tools-signed debdiff for LP#1968259 and LP#1968259 / impish" https://bugs.launchpad.net/ubuntu/+source/s390-tools-signed/+bug/1968260/+attachment/5579394/+files/debdiff_lp1968259+lp1968260_s390-tools-signed_sru_impish.patch ** Changed in: s390-tools-signed (Ubuntu Impish) Status: New => In Progress ** Changed in: s390-tools (Ubuntu Impish) Status: New => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
** Merge proposal linked: https://code.launchpad.net/~fheimes/ubuntu/+source/s390-tools-signed/+git/s390-tools-signed/+merge/419218 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
s390-tools debdiff for LP#1968259 and LP#1968260 / impish ** Patch added: "s390-tools debdiff for LP#1968259 and LP#1968260 / impish" https://bugs.launchpad.net/ubuntu/+source/s390-tools-signed/+bug/1968260/+attachment/5579319/+files/debdiff_lp1968259+lp1968260_s390-tools_sru_impish.patch -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
** Merge proposal linked: https://code.launchpad.net/~fheimes/ubuntu/+source/s390-tools/+git/s390-tools/+merge/419200 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
** Description changed:
+ SRU Justification:
+ ==
+
+ [Impact]
+
+ * DigiCert is the CA issuing the signing certificate for Secure Execution
+host key documents. This certificate is used for the verification of the
+host key document validity.
+
+ * Recently, DigiCert has changed the root CA certificate used for issuance
+of the signing certificates.
+
+ * As genprotimg is checking the CA serial, the verification of the chain of
+trust will fail.
+
+ * As a workaround, it is possible to disable certificate verification,
+but this is of course not recommended, because it makes it easier to
+provide a fake host key document.
+
+ * Since the previously issued host key documents are expiring in April 2022,
+it is necessary to fix genprotimg to accept the newly issued host key
+documents.
+
+ * The situation is now addressed by removing the DigiCert root CA
+ pinning.
+
+ * The root CA used for the chain of trust can change in the future,
+therefore it makes sense to remove this check.
+
+ * If someone wants to enforce the usage of a specific root CA, it can be
+selected by the genprotimg command line option `--root-ca $CA`.
+
+ * Make it transparent to the user which root CA is actually being used by
+printing the subject name of the root CA to stdout in verbose mode.
+
+ [Fix]
+
+ * 78b0533 78b053326c504c0535b5ec1c244ad7bb5a1df29d ("genprotimg: remove
+ DigiCert root CA pinning")
+
+ [Test Plan]
+
+ * The usage of secure execution is nicely documented at the
+'Introducing IBM Secure Execution for Linux' docs.
+
https://www.ibm.com/docs/en/linux-on-systems?topic=virtualization-introducing-secure-execution-linux
+Relevant for this fix is paragraph 'Verifying the host key document'
+
https://www.ibm.com/docs/en/linux-on-systems?topic=tasks-verify-host-key-document
+
+ * Especially notice the 'About this task' section that references the
+check_hostkeydoc script to perform the verification steps.
+
+ + Due to the fact that Secure Execution requires z15 as a minimal
+hardware level, the testing is done by IBM.
+
+ * (Test can be done in combination with LP#1968259.)
+
+ [Where problems could occur]
+
+ * The removal of the DigiCert root CA pinning can - if not carefully done)
+lead to wrong - in worst case false positive checks by genprotimg.
+
+ * The main code changes decouple the checks from DigiCert root (ca_skid)
+and to allow more general X509 certificates.
+If not done thoroughly (pv_crypto_def.h, pv_args.c, pv_image.c,
+crypto..h and crypto.c), issues will be caused while checking
+certificates. Maybe not only new ones, but also old ones.
+
+ * Overall this is an s390x topic only, and even there only relevant for
+Secure Execution (KVM) TEE environments.
+
+ [Other Info]
+
+ * Even if the LP bug title references focal only, this fix is also needed
+for all newer Ubuntu releases - here: impish and jammy.
+ __
+
== Comment: #0 - Viktor Mihajlovski - 2022-04-07
08:55:11 ==
DigiCert is the CA issuing the signing certificate for Secure Execution host
key documents. This certificate is used for the verification of the host key
document validity. Recently, DigiCert has changed the root CA certificate used
for issuance of the signing certificates.
As genprotimg is checking the CA serial, the verification of the chain of
trust will fail. As a workaround, it is possible to disable certificate
verification, but this is not recommended because it makes it easier to provide
a fake host key document.
Since the previously issued host key documents are expiring in April 2022, it
is necessary to fix genprotimg to accept the newly issued host key documents.
-
+
Contact Information = Viktor Mihajlovski
== Comment: #2 - Viktor Mihajlovski - 2022-04-07
08:57:47 ==
Fixed by:
https://github.com/ibm-s390-linux/s390-tools
commit 78b053326c504c0535b5ec1c244ad7bb5a1df29d
Author: Marc Hartmayer
Date: Thu Mar 31 14:00:31 2022 +
- genprotimg: remove DigiCert root CA pinning
+ genprotimg: remove DigiCert root CA pinning
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1968260
Title:
[UBUNTU 20.04] genprotimg fails to process z15 host key documents
after April 2022 (s390-tools)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
** Tags removed: patch ** Tags added: jammy -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
s390-tools-signed debdiff for LP#1968259 and LP#1968260 ** Patch added: "s390-tools-signed debdiff for LP#1968259 and LP#1968260" https://bugs.launchpad.net/ubuntu/+source/s390-tools-signed/+bug/1968260/+attachment/5578285/+files/debdiff_lp1968259+lp1968260_s390-tools-signed_patch_jammy.patch -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
** Merge proposal linked: https://code.launchpad.net/~fheimes/ubuntu/+source/s390-tools-signed/+git/s390-tools-signed/+merge/419135 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
The attachment "s390-tools debdiff for LP#1968259 and LP#1968260 / jammy" seems to be a debdiff. The ubuntu-sponsors team has been subscribed to the bug report so that they can review and hopefully sponsor the debdiff. If the attachment isn't a patch, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are member of the ~ubuntu-sponsors, unsubscribe the team. [This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issue please contact him.] ** Tags added: patch -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
s390-tools debdiff for LP#1968259 and LP#1968260 / jammy ** Patch added: "s390-tools debdiff for LP#1968259 and LP#1968260 / jammy" https://bugs.launchpad.net/ubuntu/+source/s390-tools-signed/+bug/1968260/+attachment/5578280/+files/debdiff_lp1968259+lp1968260_s390-tools_patch_jammy.patch ** Changed in: s390-tools-signed (Ubuntu Jammy) Status: New => In Progress ** Changed in: s390-tools (Ubuntu Jammy) Status: New => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
** Merge proposal linked: https://code.launchpad.net/~fheimes/ubuntu/+source/s390-tools/+git/s390-tools/+merge/419052 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
** Also affects: s390-tools-signed (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
** Also affects: s390-tools (Ubuntu Jammy) Importance: Undecided Assignee: Skipper Bug Screeners (skipper-screen-team) Status: New ** Also affects: s390-tools (Ubuntu Impish) Importance: Undecided Status: New ** Also affects: s390-tools (Ubuntu Focal) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1968260] Re: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools)
** Package changed: linux (Ubuntu) => s390-tools (Ubuntu) ** Also affects: ubuntu-z-systems Importance: Undecided Status: New ** Changed in: ubuntu-z-systems Assignee: (unassigned) => Skipper Bug Screeners (skipper-screen-team) ** Changed in: ubuntu-z-systems Importance: Undecided => High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968260 Title: [UBUNTU 20.04] genprotimg fails to process z15 host key documents after April 2022 (s390-tools) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1968260/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
