This bug was fixed in the package ca-certificates - 20170717~14.04.2
---
ca-certificates (20170717~14.04.2) trusty; urgency=medium
* Add ca-certificates udeb package (LP: #1807023)
-- Mauricio Faria de Oliveira Thu, 06 Dec 2018
16:20:55 -0200
** Changed in: debian-installer
This bug was fixed in the package debian-installer -
20101020ubuntu451.27
---
debian-installer (20101020ubuntu451.27) xenial; urgency=medium
* build/pkg-lists/base: add ca-certificates-udeb to enable HTTPS
without d-i/allow_unauthenticated_ssl in stock initramfs image
as in
This bug was fixed in the package debian-installer -
20101020ubuntu318.45
---
debian-installer (20101020ubuntu318.45) trusty; urgency=medium
* build/pkg-lists/base: add ca-certificates-udeb to enable HTTPS
without d-i/allow_unauthenticated_ssl in stock initramfs image
as in
This bug was fixed in the package ca-certificates - 20170717~16.04.2
---
ca-certificates (20170717~16.04.2) xenial; urgency=medium
* Add ca-certificates udeb package (LP: #1807023)
-- Mauricio Faria de Oliveira Thu, 06 Dec 2018
16:20:55 -0200
** Changed in: ca-certificates
xenial:
same steps as last comment.
reproduction using d-i version 20101020ubuntu451.26
~ # wget http://github.com/
--2018-12-19 20:15:36-- http://github.com/
Resolving github.com... 192.30.253.113, 192.30.253.112
Connecting to github.com|192.30.253.113|:80... connected.
HTTP request sent,
trusty verification:
reproduce bug:
1) get the debian-installer source version 20101020ubuntu318.44 and extract
2) in the source cd build/
3) make build_netboot
4) cd dest/netboot/ubuntu-installer/amd64
5) run steps from comment 1
6) verify wget from github.com fails due to https certificate:
~
autopkgtest failure notes:
glib-networking fails for trusty, but it failed exactly the same way in
the last auotpkgtest run, which was from 2017. Appears to be broken
test case and should be ignored for this sru.
snapd fails for xenial, but it's failed for the last 2+ months. The
tests for it
** Branch linked: lp:~ubuntu-core-dev/debian-installer/trusty-proposed
** Branch linked: lp:~ubuntu-core-dev/debian-installer/xenial-proposed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ca-certificates in Ubuntu.
This bug was fixed in the package debian-installer - 20101020ubuntu557.1
---
debian-installer (20101020ubuntu557.1) cosmic; urgency=medium
* build/pkg-lists/base: add ca-certificates-udeb to enable HTTPS
without d-i/allow_unauthenticated_ssl in stock initramfs image
as in
This bug was fixed in the package debian-installer - 20101020ubuntu543.4
---
debian-installer (20101020ubuntu543.4) bionic; urgency=medium
* build/pkg-lists/base: add ca-certificates-udeb to enable HTTPS
without d-i/allow_unauthenticated_ssl in stock initramfs image
as in
Hello Mauricio, or anyone else affected,
Accepted ca-certificates into xenial-proposed. The package will build
now and be available at https://launchpad.net/ubuntu/+source/ca-
certificates/20170717~16.04.2 in a few hours, and then in the -proposed
repository.
Please help us by testing this new
Hello Mauricio, or anyone else affected,
Accepted debian-installer into xenial-proposed. The package will build
now and be available at https://launchpad.net/ubuntu/+source/debian-
installer/20101020ubuntu451.27 in a few hours, and then in the -proposed
repository.
Please help us by testing this
** Changed in: debian-installer
Status: Unknown => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ca-certificates in Ubuntu.
https://bugs.launchpad.net/bugs/1807023
Title:
installer stock images fail
Verification :: disco-proposed
---
Okay, not strictly required as not yet a Stable Release, but doing anyway.
Successful.
$ wget http://archive.ubuntu.com/ubuntu/dists/disco-proposed/main
/installer-amd64/20101020ubuntu560/images/netboot/ubuntu-
Verification :: cosmic-proposed
---
Successful.
$ wget
http://archive.ubuntu.com/ubuntu/dists/cosmic-proposed/main/installer-amd64/20101020ubuntu557.1/images/netboot/ubuntu-installer/amd64/{linux,initrd.gz}
$ virt-install \
--name cosmic \
--vcpus 2 \
Verification :: bionic-proposed
---
Successful.
$ wget http://archive.ubuntu.com/ubuntu/dists/bionic-proposed/main
/installer-amd64/20101020ubuntu543.4/images/netboot/ubuntu-
installer/amd64/{linux,initrd.gz}
$ virt-install \
--name bionic \
--vcpus 2 \
This bug was fixed in the package debian-installer - 20101020ubuntu560
---
debian-installer (20101020ubuntu560) disco; urgency=medium
[ Mauricio Faria de Oliveira ]
* build/pkg-lists/base: add ca-certificates-udeb to enable HTTPS
without d-i/allow_unauthenticated_ssl in stock
Hello Mauricio, or anyone else affected,
Accepted debian-installer into bionic-proposed. The package will build
now and be available at https://launchpad.net/ubuntu/+source/debian-
installer/20101020ubuntu543.4 in a few hours, and then in the -proposed
repository.
Please help us by testing this
Hello Mauricio, or anyone else affected,
Accepted debian-installer into cosmic-proposed. The package will build
now and be available at https://launchpad.net/ubuntu/+source/debian-
installer/20101020ubuntu557.1 in a few hours, and then in the -proposed
repository.
Please help us by testing this
** Branch linked: lp:~ubuntu-core-dev/debian-installer/bionic-proposed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ca-certificates in Ubuntu.
https://bugs.launchpad.net/bugs/1807023
Title:
installer stock images fail
** Branch linked: lp:~ubuntu-core-dev/debian-installer/cosmic-proposed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ca-certificates in Ubuntu.
https://bugs.launchpad.net/bugs/1807023
Title:
installer stock images fail
** Patch added: "lp1807023-ca-certificates-xenial.debdiff"
https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5220173/+files/lp1807023-ca-certificates-xenial.debdiff
--
You received this bug notification because you are a member of Ubuntu
Touch seeded
** Patch added: "lp1807023-ca-certificates-trusty.debdiff"
https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5220172/+files/lp1807023-ca-certificates-trusty.debdiff
--
You received this bug notification because you are a member of Ubuntu
Touch seeded
** Patch removed: "lp1807023-ca-certificates-xenial.debdiff"
https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5220101/+files/lp1807023-ca-certificates-xenial.debdiff
** Patch removed: "lp1807023-ca-certificates-trusty.debdiff"
** Branch linked: lp:~ubuntu-core-dev/debian-installer/ubuntu
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ca-certificates in Ubuntu.
https://bugs.launchpad.net/bugs/1807023
Title:
installer stock images fail to
** Changed in: ca-certificates (Ubuntu Disco)
Status: In Progress => Invalid
** Changed in: ca-certificates (Ubuntu Disco)
Assignee: Mauricio Faria de Oliveira (mfo) => (unassigned)
** Changed in: ca-certificates (Ubuntu Cosmic)
Status: In Progress => Invalid
** Changed in:
Marked ca-certificates for b/c/d as Invalid - it does not need an
upload, only archive twiddling to move its component.
For t/x, ca-certificates does need the patches @mfo attached to actually
generate the -udeb binary pkg.
Please nobody sponsor this bug - @slashd or I will handle the sruing.
Please do the necessary to make sure we don't upload ca-certificates by
mistake again.
I would suggest we :
1) Remove the debdiff
2) Set the status for ca-certificates to "Won't Fix"
To avoid confusion.
The ca-certificates work need to be done by an archive admin, no rebuild
needed.
Regards,
removing the sponsors team - please nobody upload this! @slashd or i
will sru when ready.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ca-certificates in Ubuntu.
https://bugs.launchpad.net/bugs/1807023
Title:
installer
>From #ubuntu-release (freenode)
With regards to the FTBFS situation with ca-certificates-udeb:
slashd: Promoted. I'll retry the builds when the publisher's done
moving it around.
slashd: Just disco. For other releases, it'll require some fiddling.
I'll continue with the SRU as soon as
>From #ubuntu-release (freenode)
With regards to the FTBFS situation with ca-certificates-udeb:
slashd: Promoted. I'll retry the builds when the publisher's
done moving it around.
I'll continue with the SRU as soon as disco is building fine and goes
into -releases.
--
You received this bug
The ca-certificates fix for Xenial and Trusty
include the changes to build the (new) udeb.
The normal deb package has been verified for
regressions (next comments) and it is correct,
with no functional changes whatsoever.
--
You received this bug notification because you are a member of Ubuntu
Package Contents :: Xenial
==
No regressions in ca-certificate DEB file
after the changes to build the UDEB file.
The only difference is due to the changes
in changelog file and package version.
dpkg-deb -c (content listing)
---
$ dpkg-deb -c
Package Contents :: Trusty
==
No regressions in ca-certificate DEB file
after the changes to build the UDEB file.
The only difference is due to the changes
in changelog file and package version.
dpkg-deb -c (content listing)
---
$ dpkg-deb -c
** Description changed:
[Impact]
* The installer stock images fail to validate any HTTPS
certificates because ca-certificates is not available
in the installer environment.
* This causes wget/download errors for preseed files on
HTTPS servers (or HTTP servers that
** Patch added: "lp1807023-debian-installer-xenial.debdiff"
https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5220102/+files/lp1807023-debian-installer-xenial.debdiff
--
You received this bug notification because you are a member of Ubuntu
Touch seeded
** Patch added: "lp1807023-debian-installer-trusty.debdiff"
https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5220104/+files/lp1807023-debian-installer-trusty.debdiff
--
You received this bug notification because you are a member of Ubuntu
Touch seeded
Testing :: Trusty
=
original
wget http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main
/installer-amd64/20101020ubuntu318.44/images/netboot/ubuntu-
installer/amd64/{linux,initrd.gz}
~ # cat /etc/default-release
trusty
~ # ls -d /usr/lib/ssl/certs
ls:
Testing :: Xenial
=
original
wget http://archive.ubuntu.com/ubuntu/dists/xenial-updates/main
/installer-amd64/20101020ubuntu451.26/images/netboot/ubuntu-
installer/amd64/{linux,initrd.gz}
~ # cat /etc/default-release
xenial
~ # ls -d /usr/lib/ssl/certs
ls:
** Patch added: "lp1807023-ca-certificates-xenial.debdiff"
https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5220101/+files/lp1807023-ca-certificates-xenial.debdiff
--
You received this bug notification because you are a member of Ubuntu
Touch seeded
** Patch added: "lp1807023-ca-certificates-trusty.debdiff"
https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5220103/+files/lp1807023-ca-certificates-trusty.debdiff
--
You received this bug notification because you are a member of Ubuntu
Touch seeded
** Also affects: debian-installer via
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842040
Importance: Unknown
Status: Unknown
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ca-certificates in Ubuntu.
d-i for disco uploaded but it now FTBFS because it cannot locate ca-
certificate-udeb.
For some reasons, I didn't notice before hand but ca-certificates
(deb)[1] is found in "main" but ca-certificates (udeb)[2] in 'Universe'
and I suspect the build failure is due to the fact that the builder
** Patch added: "lp1807023-ca-certificates-bionic.debdiff"
https://bugs.launchpad.net/ubuntu/disco/+source/ca-certificates/+bug/1807023/+attachment/5219790/+files/lp1807023-ca-certificates-bionic.debdiff
** Patch removed: "ca-certificates_disco.debdiff"
** Patch added: "lp1807023-ca-certificates-disco.debdiff"
https://bugs.launchpad.net/ubuntu/disco/+source/ca-certificates/+bug/1807023/+attachment/5219788/+files/lp1807023-ca-certificates-disco.debdiff
--
You received this bug notification because you are a member of Ubuntu
Touch seeded
attached debdiffs for ca-certificates and debian-installer for b/c/d
with LP: #NNN tag corrected to use this bug number.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ca-certificates in Ubuntu.
** Patch added: "lp1807023-ca-certificates-cosmic.debdiff"
https://bugs.launchpad.net/ubuntu/disco/+source/ca-certificates/+bug/1807023/+attachment/5219789/+files/lp1807023-ca-certificates-cosmic.debdiff
--
You received this bug notification because you are a member of Ubuntu
Touch seeded
** Patch added: "lp1807023-debian-installer-cosmic.debdiff"
https://bugs.launchpad.net/ubuntu/disco/+source/ca-certificates/+bug/1807023/+attachment/5219786/+files/lp1807023-debian-installer-cosmic.debdiff
--
You received this bug notification because you are a member of Ubuntu
Touch seeded
** Patch added: "lp1807023-debian-installer-bionic.debdiff"
https://bugs.launchpad.net/ubuntu/disco/+source/ca-certificates/+bug/1807023/+attachment/5219787/+files/lp1807023-debian-installer-bionic.debdiff
** Patch removed: "lp1807023-ca-certificates-disco.debdiff"
** Also affects: ca-certificates (Ubuntu)
Importance: Undecided
Status: New
** Changed in: ca-certificates (Ubuntu Bionic)
Importance: Undecided => Medium
** Changed in: ca-certificates (Ubuntu Bionic)
Status: New => In Progress
** Changed in: ca-certificates (Ubuntu Bionic)
50 matches
Mail list logo
