[Bug 643787] Re: certificate verifcation does not work with newSSL
Karmic has long since stopped to receive any updates. Marking the Karmic task for this ticket as Won't Fix. ** Changed in: erlang (Ubuntu Karmic) Status: New = Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/643787 Title: certificate verifcation does not work with newSSL To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/erlang/+bug/643787/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
** Changed in: erlang (Ubuntu Lucid) Status: Fix Released = Fix Committed ** Changed in: erlang (Ubuntu Lucid) Status: Fix Committed = Fix Released -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
Does this bug also affect Jaunty? I am indeed running ejabberd (based on erlang) on a jaunty server, with a self-signed ssl certificate. Do I have a potential security risk? Jaunty is supposed to be supported until the end of this month (precisely Oct 23th according to https://wiki.ubuntu.com/Releases) I know that the end-of-life is very soon and I should upgrade my server to keep it secure. But the processor of this server (a Sheevaplug http://en.wikipedia.org/wiki/SheevaPlug) is an armv5, which is no longer supported since Karmic (see http://plugcomputer.org/plugforum/index.php?topic=885.0). So the upgrade of Ubuntu is not possible : I will have to reinstall it with Debian, which I would like to avoid until really necessary -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
This bug was fixed in the package erlang - 1:13.b.3-dfsg-2ubuntu2.1 --- erlang (1:13.b.3-dfsg-2ubuntu2.1) lucid-proposed; urgency=low [ Samuele Pedroni ] * fix for ssl certificate verification in newSSL: ssl_cacertfile_fix.patch (LP: #643787) -- Elliot Murphy ell...@ubuntu.com Thu, 30 Sep 2010 14:48:32 -0400 ** Changed in: erlang (Ubuntu Lucid) Status: In Progress = Fix Released -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
Rick: when you ran into these problems, did you have the ubuntuone hackers private PPA enabled? That archive has had a package with a newer version number than the one in lucid-proposed. When I disabled the ubuntuone hackers PPA and downgraded to the stock lucid packages, I didn't see any of these errors you reported (either from apt-get upgrade or apt-get install erlang-ssl). Samuele's new_ssl_test script appears to function after installing the lucid- propsed packages. If I reinstall the erlang packages from the ubuntuone hackers PPA and then try to install any of the lucid-proposed packages, I do get errors similar to what you describe, but that is to be expected when we're talking about a downgrade. Does this sound anything like what you experienced? -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
James: What appears to have happened is that in configuring lucid-proposed as suggested in the SRU related instructions (restricted to install only what is requested) that aptitude was somehow unable to completely resolve all of the dependencies. by configuring lucid-proposed as a normal repository got a successful upgrade (but unfortunately installed many other un-related packages that are in proposed on the test system. I'm retracting my tag change and re-running the validation. ** Tags added: verification-needed ** Tags removed: verification-failed -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
After the change described in my above entry, Samuele's updated instructions (his above) test as described, including the warning that is expected for the unparsable cert. ** Tags added: verification-done ** Tags removed: verification-needed -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
above verification was in Lucid -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
sorry, my fault I gave the instruction that work if the script is
already compiled, you need:
pedro...@ubuntu-desktop:~/scratch/packaging$ erl
Erlang R13B03 (erts-5.7.4) [source] [rq:1] [async-threads:0] [hipe]
[kernel-poll:false]
Eshell V5.7.4 (abort with ^G)
1 c(new_ssl_test).
{ok,new_ssl_test}
2 new_ssl_test:test().
very sorry.
--
certificate verifcation does not work with newSSL
https://bugs.launchpad.net/bugs/643787
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
don't think the new package changes in any way how the costellation of erlang packages behave on upgrade, so whatever deps problem on upgrade there are they were there for previous versions as well -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
Samuele, I'm trying to do the SRU verification on this (for lucid-proposed), however the directions provided result only in ** exception error: undefined function new_ssl_test:test/0 in Eshell. Any ideas? -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
I have a test set to test through couchdb provided by Eric C, however... there's significant conflict in the dependencies of other erlang packages. In particular, erlang-inets: Depends: erlang-ssl (= 1:13.b.3-dfsg-2ubuntu2) but it is not going to be installed erlang-xmerl also shows issues with the new version installed on Lucid. It appears as if the combined and very finicky version deps in erlang result in a broken erlang installation when 1:13.b.3-dfsg-2ubuntu2.1 is installed. ** Changed in: erlang (Ubuntu Lucid) Status: Fix Committed = In Progress -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
since the fixed verison of erlang-ssl breaks erlang installations on Lucid (see previous note from me) this cannot be verified. Packaging fixes will be required for multiple erlang-* packages for this to work. ** Tags added: verification-failed ** Tags removed: verification-needed -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
I haven't tracked through all of the Depends: lines, but the observed behavior is that installing the patched erlang-ssl package UNINSTALLS a significant number of other erlang packages. Likewise, installing erlang-xmerl after the patched erlang-ssl uninstalls the patched erlang- ssl and a number of other packages that appear to have been updated at the same time. -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
Accepted erlang into lucid-proposed, the package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance! ** Changed in: erlang (Ubuntu Lucid) Status: New = Fix Committed ** Tags added: verification-needed -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
The uploaded karmic package is a backport from lucid, which introduces a lot of new upstream versions and changes. This is not at all what an SRU is supposed to do. Can we please just backport the SSL fix? Even if this was acceptable, if an upload introduces more than just the last changelog record, it needs to be built with -vversion in karmic/-updates/-security. Rejecting karmic upload. -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
** Branch linked: lp:ubuntu/lucid-proposed/erlang -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
attaching an erlang script to try, it should fail with the old packaged erlang and work with the new one (except for a warning about a certificate that cannot be parsed) it can be run thus: $erl l(new_ssl_test). new_ssl_test:test(). ** Attachment added: script to test cert verification fix https://bugs.edge.launchpad.net/ubuntu/+source/erlang/+bug/643787/+attachment/1671452/+files/new_ssl_test.erl -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
This fix is a prerequisite for LP: #422178. I am attaching the debdiff per https://wiki.ubuntu.com/StableReleaseUpdates This is a patch from upstream Erlang developers in Erlang/OTP team at Ericsson which fixes a serious problem in the SSL library that was preventing SSL host certificate verification from happening (we discovered the problem while working on CouchDB). ** Also affects: erlang (Ubuntu Lucid) Importance: Undecided Status: New ** Patch added: debdiff https://bugs.edge.launchpad.net/ubuntu/+source/erlang/+bug/643787/+attachment/1664619/+files/lucid-sru.debdiff -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
Samuele, could you add the test program that Filipe was using to verify the SSL fix so that it will be easier to validate this fix? -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
** Also affects: erlang (Ubuntu Karmic) Importance: Undecided Status: New -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
** Also affects: erlang (Ubuntu Maverick) Importance: High Assignee: Samuele Pedroni (pedronis) Status: In Progress -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
This bug was fixed in the package erlang - 1:13.b.3-dfsg-2ubuntu3 --- erlang (1:13.b.3-dfsg-2ubuntu3) maverick; urgency=low * fix for ssl certificate verification in newSSL: ssl_cacertfile_fix.patch (LP: #643787) -- samuele.pedr...@canonical.com (Samuele Pedroni (Canonical Services Ltd.)) Fri, 24 Sep 2010 09:35:12 +0200 ** Changed in: erlang (Ubuntu Maverick) Status: In Progress = Fix Released -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 643787] Re: certificate verifcation does not work with newSSL
** Tags added: desktop+ foundations+ u1-lucid-sru u1-maverick ** Changed in: erlang (Ubuntu) Status: New = Triaged ** Changed in: erlang (Ubuntu) Importance: Undecided = High ** Changed in: erlang (Ubuntu) Assignee: (unassigned) = Samuele Pedroni (pedronis) ** Changed in: erlang (Ubuntu) Status: Triaged = In Progress -- certificate verifcation does not work with newSSL https://bugs.launchpad.net/bugs/643787 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
