Your message dated Sat, 04 Feb 2017 12:48:35 +0000
with message-id <e1czzlb-000huh...@fasolo.debian.org>
and subject line Bug#853732: fixed in gnutls28 3.5.8-3
has caused the Debian Bug report #853732,
regarding gnutls28: build fails depending on timezone
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
853732: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=853732
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: gnutls28
Version: 3.5.8-2
Severity: serious
Tags: patch upstream
Justification: fails to build from source (but built successfully in the past)
The build fails in the pkcs7 testsuite because of a wrong date;
the testsuite fudges to 2038-10-12 00:00:00 localtime:
(pbuild22064)root@tglase:/tmp/buildd/gnutls28-3.5.8 # openssl x509 -noout -text
-in doc/credentials/x509/ca.pem | fgrep Not
Not Before: May 28 08:36:30 2011 GMT
Not After : Oct 12 08:36:33 2038 GMT
The fix is easy:
--- /tmp/buildd/gnutls28-3.5.8/tests/cert-tests/pkcs7~ 2017-01-31
10:37:42.041736473 +0000
+++ /tmp/buildd/gnutls28-3.5.8/tests/cert-tests/pkcs7 2017-01-31
10:39:00.490675092 +0000
@@ -74,7 +74,7 @@
fi
# check validation with date after intermediate cert issuance
-datefudge -s "2038-10-12" \
+datefudge -s "2038-10-12 08:36:34 UTC" \
${VALGRIND} "${CERTTOOL}" --inder --p7-verify --load-ca-certificate
"${srcdir}/../../doc/credentials/x509/ca.pem" --infile "${srcdir}/data/${FILE}"
>"${OUTFILE}"
rc=$?
This has been verified (including that "2038-10-12 08:36:32 UTC"
toggles $?) on x32 after #853724 was resolved (issue with post-32bit
timestamps), but is extremely likely to affect other architectures
and thus is likely RC. (Also, why didn’t the reproducible builds
efforts catch this? Probably because of the bug in datefudge…)
(Also, why did upstream not catch this…)
-- System Information:
Debian Release: 9.0
APT prefers unreleased
APT policy: (500, 'unreleased'), (500, 'buildd-unstable'), (500, 'unstable')
Architecture: x32 (x86_64)
Foreign Architectures: i386, amd64
Kernel: Linux 4.9.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/lksh
Init: sysvinit (via /sbin/init)
--- End Message ---
--- Begin Message ---
Source: gnutls28
Source-Version: 3.5.8-3
We believe that the bug you reported is fixed in the latest version of
gnutls28, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 853...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Andreas Metzler <ametz...@debian.org> (supplier of updated gnutls28 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 04 Feb 2017 12:58:45 +0100
Source: gnutls28
Binary: libgnutls28-dev libgnutls30 gnutls-bin gnutls-doc libgnutlsxx28
libgnutls-openssl27 libgnutls-dane0
Architecture: source
Version: 3.5.8-3
Distribution: unstable
Urgency: high
Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-ma...@lists.alioth.debian.org>
Changed-By: Andreas Metzler <ametz...@debian.org>
Closes: 853732
Description:
gnutls-bin - GNU TLS library - commandline utilities
gnutls-doc - GNU TLS library - documentation and examples
libgnutls28-dev - GNU TLS library - development files
libgnutls30 - GNU TLS library - main runtime library
libgnutls-dane0 - GNU TLS library - DANE security support
libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper
libgnutlsxx28 - GNU TLS library - C++ runtime library
Changes:
gnutls28 (3.5.8-3) unstable; urgency=high
.
* Another two bugfixes from upstream.
+ 35_03_Address-test-suite-failure-due-to-timezone-differenc.patch
Address test suite failure due to timezone differences.
Closes: #853732
+ 35_04_gnutls_pkcs11_obj_list_import_url4-always-return-an-.patch
When returning success, but no elements
gnutls_pkcs11_obj_list_import_url4 could have returned zero number of
elements with a pointer that was uninitialized.
Checksums-Sha1:
ba332a55d643c0db674530fab2b4440d5f287c6b 3258 gnutls28_3.5.8-3.dsc
eb8485baa14b34f7fc412a6f2f50f1a20012c851 101548 gnutls28_3.5.8-3.debian.tar.xz
Checksums-Sha256:
1dcfcfebc6a833ac46e6bd5cde7dcf0873c14a4211228d5e96b36a65e0307e1e 3258
gnutls28_3.5.8-3.dsc
87f571ea1d89ecaa384510698e6b9d8fa4d71d08435101ae945fd7357cfa4ed2 101548
gnutls28_3.5.8-3.debian.tar.xz
Files:
9c1181b7899a8948c25c11202ea225f8 3258 libs optional gnutls28_3.5.8-3.dsc
36560f5f3318e79c82f9c53a483dc334 101548 libs optional
gnutls28_3.5.8-3.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=7h7N
-----END PGP SIGNATURE-----
--- End Message ---
